openapi: 3.1.0 servers: - url: https://public.escape.tech/v3 tags: - name: Profiles description: 'A Profile is a configuration for the DAST scanning feature. It includes various parameters such as authentication details, environment settings, a schema... Profiles allow you to start scans on an endpoint and will keep track of the scan history. This ensures consistency in repeated scans and helps track changes or improvements over time. See [our documentation](https://docs.escape.tech/documentation/#profile) for more details.' - name: Assets description: 'Manage every discovered Assets. The public API provide basic CRUDs operations for all available assets. See [our documentation](https://docs.escape.tech/documentation/asm/asset-management/) for more details.' - name: Integrations description: 'Manage 3rd party integrations. The public API provide basic CRUDs operations for all available integrations. See [our documentation](https://https://docs.escape.tech/documentation/asm/integrations/) for more details.' - name: Workflows description: 'Workflows Management The public API provides CRUDs operations to manage workflows.' - name: Scans description: 'A Scan is a run of the DAST or ASM scanning feature on an profile (DAST/ASM). With the public API, you can trigger scans, track their status, and retrieve their results. See [our documentation](https://docs.escape.tech/documentation/dast/) for more details.' - name: Emails description: 'Read scan inbox emails. The public API provides endpoints to list inbox emails and read their raw content without exposing storage links.' - name: Issues description: 'Manage issues. Identify, prioritize, and remediate the security issues and sensitive data exposures uncovered during ASM and DAST scanning See [our documentation](https://docs.escape.tech/documentation/governance/vulnerability-management/) for more details.' - name: Jobs description: 'Asynchronous jobs. Trigger export jobs and poll for completion and artefacts.' - name: Events description: 'Manage events. The public API provides basic CRUDs operations to manage events.' - name: Tags description: 'Manage tags. The public API provides basic CRUDs operations to manage tags.' - name: CustomRules description: 'Manage your custom rules. The public API provides basic CRUDs operations to manage custom rules. See [our documentation](https://docs.escape.tech/documentation/dast/custom-rules/) for more details.' - name: Upload description: 'Upload helper for Escape Platform. The public API provides endpoints to upload files to the platform.' - name: Locations description: 'A Location is a proxy environment through which Escape sends requests. The public API provide basic CRUDs operations for your private locations. See [our documentation](https://docs.escape.tech/documentation/tooling/private-location/) for more details.' - name: Audit description: 'List audit logs. The public API provides endpoints to list audit logs. See [our documentation](https://docs.escape.tech/documentation/enterprise/audit-logs/) for more details.' - name: Projects description: 'Projects Management The public API provides CRUDs operations to manage projects.' - name: Roles description: 'Roles Management The public API provides CRUDs operations to manage roles.' - name: Users description: 'Users Management The public API provides CRUDs operations to manage users.' - name: Statistics description: 'Organization Statistics High-level organization security posture statistics.' - name: Asm description: 'Attack Surface Management Trigger and manage ASM discovery scans on your attack surface. See [our documentation](https://docs.escape.tech/documentation/asm/) for more details.' - name: Beta description: 'Beta These endpoints are in beta and are subject to change.' info: version: 3.0.0 title: Escape Public API description: 'This API enables you to operate [Escape](https://escape.tech/) programmatically. All requests must be authenticated with a valid API key, provided in the `X-ESCAPE-API-KEY` header. For example: `X-ESCAPE-API-KEY: YOUR_API_KEY`. You can find your API key in the [Escape dashboard](https://app.escape.tech/user/).' security: - apiKey: [] components: securitySchemes: apiKey: type: apiKey in: header name: X-ESCAPE-API-KEY schemas: {} parameters: {} paths: /profiles: get: tags: - Profiles summary: List profiles operationId: listProfiles description: List and search profiles of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - LAST_SCAN - NAME - SCORE - SEVERITY description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by asset IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by asset IDs name: assetIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by domain example: example.com,example.org required: false description: Filter by domain name: domains in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by issue IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by issue IDs name: issueIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by tag IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by tag IDs name: tagIds in: query - schema: type: string description: Search term to filter profiles by name or description example: profile1 required: false description: Search term to filter profiles by name or description name: search in: query - schema: type: array items: type: string enum: - APPLICATION_CREATION - CI - INVENTORY - MANUAL - SCHEDULED - UNKNOWN description: Filter by initiator required: false description: Filter by initiator name: initiators in: query - schema: type: array items: type: string enum: - ASM_AKAMAI_ACCOUNT - ASM_AWS_ACCOUNT - ASM_AWS_LAMBDA - ASM_AZURE_TENANT - ASM_BITBUCKET_ORGANIZATION - ASM_BITBUCKET_REPOSITORY - ASM_BURPSUITE_EXPORT - ASM_CLOUDFLARE_ACCOUNT - ASM_CODE_PROJECT - ASM_DNS - ASM_GCP_PROJECT - ASM_GITHUB_ORGANIZATION - ASM_GITHUB_REPOSITORY - ASM_GITLAB_GROUP - ASM_GITLAB_REPOSITORY - ASM_GRAPHQL - ASM_GRAPHQL_SCHEMA - ASM_GRPC - ASM_HAR_EXPORT - ASM_INSOMNIA - ASM_IPV4 - ASM_IPV4_RANGE - ASM_IPV6 - ASM_KUBERNETES_CLUSTER - ASM_MCP - ASM_OPENAPI - ASM_PACKAGE - ASM_POSTMAN_COLLECTION - ASM_POSTMAN_ENVIRONMENT - ASM_POSTMAN_ORGANIZATION - ASM_REST - ASM_SOAP - ASM_SOFTWARE - ASM_WEBAPP - ASM_WEBSOCKET - ASM_WIZ_ACCOUNT - ASM_WP_JSON - AUTOMATED_PENTEST_GRAPHQL - AUTOMATED_PENTEST_REST - AUTOMATED_PENTEST_WEBAPP - BLST_GRAPHQL - BLST_REST - FRONTEND_DAST description: Filter by kind required: false description: Filter by kind name: kinds in: query - schema: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: Filter by risk required: false description: Filter by risk name: risks in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile createdAt: type: string description: The date and time the profile was created initiators: type: array items: type: string enum: - APPLICATION_CREATION - CI - INVENTORY - MANUAL - SCHEDULED - UNKNOWN description: The initiators of the profile cron: type: - string - 'null' description: The cron of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, or the legacy `assetSchemaId` when the link is not yet visible in `extraAssets`. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: Extra assets linked to the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile score: type: - number - 'null' description: Security score of the last scan (0-100). Null if no scan has completed. coverage: type: - number - 'null' description: Coverage ratio of the last scan (0-1). Null if no scan has completed. openIssueCount: type: - integer - 'null' description: Number of open issues across all scans for this profile. lastScanStatus: type: - string - 'null' description: Status of the most recent scan (e.g. FINISHED, RUNNING, FAILED). links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - createdAt - initiators - cron - schemaAssetId - extraAssets - asset - links title: ProfileSummarized description: Summarized information about a profile required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied /profiles/problems: get: tags: - Profiles summary: List all scan statuses and problems operationId: problems description: List all scan statuses and problems parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - LAST_SCAN - NAME - SCORE - SEVERITY description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by asset IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by asset IDs name: assetIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by domain example: example.com,example.org required: false description: Filter by domain name: domains in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by issue IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by issue IDs name: issueIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by tag IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by tag IDs name: tagIds in: query - schema: type: string description: Search term to filter profiles by name or description example: profile1 required: false description: Search term to filter profiles by name or description name: search in: query - schema: type: array items: type: string enum: - APPLICATION_CREATION - CI - INVENTORY - MANUAL - SCHEDULED - UNKNOWN description: Filter by initiator required: false description: Filter by initiator name: initiators in: query - schema: type: array items: type: string enum: - ASM_AKAMAI_ACCOUNT - ASM_AWS_ACCOUNT - ASM_AWS_LAMBDA - ASM_AZURE_TENANT - ASM_BITBUCKET_ORGANIZATION - ASM_BITBUCKET_REPOSITORY - ASM_BURPSUITE_EXPORT - ASM_CLOUDFLARE_ACCOUNT - ASM_CODE_PROJECT - ASM_DNS - ASM_GCP_PROJECT - ASM_GITHUB_ORGANIZATION - ASM_GITHUB_REPOSITORY - ASM_GITLAB_GROUP - ASM_GITLAB_REPOSITORY - ASM_GRAPHQL - ASM_GRAPHQL_SCHEMA - ASM_GRPC - ASM_HAR_EXPORT - ASM_INSOMNIA - ASM_IPV4 - ASM_IPV4_RANGE - ASM_IPV6 - ASM_KUBERNETES_CLUSTER - ASM_MCP - ASM_OPENAPI - ASM_PACKAGE - ASM_POSTMAN_COLLECTION - ASM_POSTMAN_ENVIRONMENT - ASM_POSTMAN_ORGANIZATION - ASM_REST - ASM_SOAP - ASM_SOFTWARE - ASM_WEBAPP - ASM_WEBSOCKET - ASM_WIZ_ACCOUNT - ASM_WP_JSON - AUTOMATED_PENTEST_GRAPHQL - AUTOMATED_PENTEST_REST - AUTOMATED_PENTEST_WEBAPP - BLST_GRAPHQL - BLST_REST - FRONTEND_DAST description: Filter by kind required: false description: Filter by kind name: kinds in: query - schema: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: Filter by risk required: false description: Filter by risk name: risks in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan problems: type: array items: type: object properties: code: type: string description: The problem code message: type: string description: The problem message severity: type: string description: The problem severity required: - code - message - severity description: The problems found in the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links - problems title: ScanSummarizedWithProblems description: The most recent scan status and problems for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan problems: type: array items: type: object properties: code: type: string description: The problem code message: type: string description: The problem message severity: type: string description: The problem severity required: - code - message - severity description: The problems found in the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links - problems title: ScanSummarizedWithProblems description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true required: - id - name - lastScan - lastResourceScan title: ProfileScanProblemsRow description: Profile with last scan status and scan problems required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied /profiles/{profileId}: get: tags: - Profiles summary: Get a profile operationId: getProfile description: Get a profile by ID parameters: - schema: type: string description: The profile ID example: 00000000-0000-0000-0000-000000000000 required: true description: The profile ID name: profileId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist put: tags: - Profiles summary: Update a profile operationId: updateProfile description: Update a profile of a given scanner kind parameters: - schema: type: string description: The profile ID example: 00000000-0000-0000-0000-000000000000 required: true description: The profile ID name: profileId in: path requestBody: description: Body of the request to update a profile content: application/json: schema: type: object properties: name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance cron: type: string description: The cron of the profile example: 0 0 * * * extraAssetIds: anyOf: - type: string - type: array items: type: string description: The extra asset ID for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist delete: tags: - Profiles summary: Delete a profile operationId: deleteProfile description: Delete a profile by ID parameters: - schema: type: string description: The profile ID example: 00000000-0000-0000-0000-000000000000 required: true description: The profile ID name: profileId in: path responses: '200': description: OK content: application/json: schema: type: object properties: message: type: string required: - message '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /profiles/{profileId}/configuration: put: tags: - Profiles summary: Update profile configuration operationId: updateProfileConfiguration description: Update the configuration of a profile parameters: - schema: type: string description: The profile ID example: 00000000-0000-0000-0000-000000000000 required: true description: The profile ID name: profileId in: path requestBody: description: Body of the request to update profile configuration content: application/json: schema: type: object properties: configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The configuration to update required: - configuration responses: '200': description: OK content: application/json: schema: type: object additionalProperties: {} '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /profiles/{profileId}/schema: put: tags: - Profiles summary: Update profile schema operationId: updateProfileSchema description: ' *This route is deprecated, use the [PUT /profiles/:profileId](#tag/profiles/PUT/profiles/:profileId) endpoint instead.* Update the schema used to scan this profile. The schema ID is the ID of a schema uploaded to the Escape Platform using the [POST /assets/schema](#tag/assets/POST/assets/schema) endpoint. ' deprecated: true parameters: - schema: type: string description: The profile ID example: 00000000-0000-0000-0000-000000000000 required: true description: The profile ID name: profileId in: path requestBody: description: Body of the request to update profile schema content: application/json: schema: type: object properties: schemaId: type: string description: The asset schema ID example: 00000000-0000-0000-0000-000000000000 required: - schemaId responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /profiles/rest: post: tags: - Profiles summary: Create a DAST REST profile operationId: createDastRestProfile description: Create a DAST REST profile. requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /profiles/graphql: post: tags: - Profiles summary: Create a DAST GraphQL profile operationId: createDastGraphqlProfile description: Create a DAST GraphQL profile. requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /profiles/webapp: post: tags: - Profiles summary: Create a DAST WebApp profile operationId: createDastWebAppProfile description: Create a DAST WebApp profile. requestBody: description: Body of the request to create a DAST WebApp profile content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /profiles/ai-pentesting/rest: post: tags: - Profiles - Beta summary: Create an Automated Pentest REST profile operationId: createPentestRestProfile description: Create an Automated Pentest REST profile. requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /profiles/ai-pentesting/graphql: post: tags: - Profiles - Beta summary: Create an Automated Pentest GraphQL profile operationId: createPentestGraphqlProfile description: Create an Automated Pentest GraphQL profile. requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /profiles/ai-pentesting/webapp: post: tags: - Profiles - Beta summary: Create an Automated Pentest WebApp profile operationId: createPentestWebappProfile description: Create an Automated Pentest WebApp profile. requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /authentications: post: tags: - Profiles summary: Start an authentication configuration check operationId: startAuthentication description: Validates authentication credentials without running a full scan. Provide `authentication` directly, or pass a `profileId` to reuse its saved authentication (optionally overriding it). Poll `GET /authentications/{id}` until `status` is FINISHED, FAILED, or CANCELED. requestBody: content: application/json: schema: type: object properties: profileId: type: string format: uuid description: Profile whose saved configuration is used as the baseline. When omitted, `authentication` must be provided. authentication: type: object additionalProperties: {} description: Authentication object to validate. When `profileId` is also set, this replaces the profile saved authentication. proxyId: type: - string - 'null' format: uuid description: Force a specific Escape or private location (proxy) for this check defaultProxyType: type: string enum: - ESCAPE - PRIVATE description: When `proxyId` is omitted, restrict to Escape-managed locations or private locations responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: Identifier for this check; use it when polling for status status: type: string enum: - CANCELED - FAILED - FINISHED - RUNNING - STARTING description: Initial lifecycle state (typically STARTING right after creation) required: - id - status '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /authentications/{authenticationId}: get: tags: - Profiles summary: Get authentication configuration check status operationId: getAuthentication description: Returns the current status, chronological log messages, and (when finished) structured authentication results for a check started via `POST /authentications`. parameters: - schema: type: string format: uuid description: Identifier returned by the start endpoint required: true description: Identifier returned by the start endpoint name: authenticationId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: Identifier of this check status: type: string enum: - CANCELED - FAILED - FINISHED - RUNNING - STARTING description: Current lifecycle state progressRatio: type: number description: Approximate progress between 0 and 1 while the check is running createdAt: type: string description: When the check was started authentication: type: - object - 'null' properties: model_discriminator_: type: string enum: - AUTHENTICATION_RESULT users: type: array items: type: object properties: username: type: string authentication: type: object properties: headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: type: object additionalProperties: type: string local_storage: type: object additionalProperties: type: object additionalProperties: type: string session_storage: type: object additionalProperties: type: object additionalProperties: type: string digest: type: string basic: type: string required: - headers - cookies - query_parameters - body - local_storage - session_storage failure_message: type: - string - 'null' is_valid: type: boolean iso_expiration_date: type: string required: - username - authentication - is_valid - iso_expiration_date required: - model_discriminator_ - users description: Null while the check is running. When FINISHED, contains the authenticated users and their tokens. events: type: array items: type: object properties: createdAt: type: string description: When this log entry was recorded level: type: string enum: - DEBUG - ERROR - INFO - WARNING description: Severity of the message stage: type: string enum: - AGENT_ACTION - AGENT_REASONING - CONFIGURATION - EXECUTION description: Phase of the check title: type: string description: Short headline for the message description: type: string description: Full message body required: - createdAt - level - stage - title - description title: AuthenticationEvent description: A single progress or diagnostic message from an authentication configuration check description: Chronological messages from the check, including errors that explain misconfiguration required: - id - status - progressRatio - createdAt - authentication - events '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /assets: get: tags: - Assets summary: List assets operationId: listAssets description: List and search assets of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - DOMAIN - ENDPOINTS_COUNT - FIRST_SEEN - LAST_SEEN - NAME - PORTS - SEVERITY - TYPE - USED_BY_COUNT description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: string example: asset1 description: Search term to filter assets by name or description required: false description: Search term to filter assets by name or description name: search in: query - schema: type: array items: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: Filter by type required: false description: Filter by type name: types in: query - schema: type: array items: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: Filter by status required: false description: Filter by status name: statuses in: query - schema: type: string enum: - 'true' - 'false' example: 'true' description: Filter by manually created required: false description: Filter by manually created name: manuallyCreated in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset owners: type: array items: type: string format: email description: Email addresses of the owners of this asset. service: type: - object - 'null' properties: url: type: string description: The url of the asset service type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET description: The type of the asset service required: - url - type title: AssetServiceSummarized description: The service of the asset frontend: type: - object - 'null' properties: url: type: string description: The url of the asset frontend type: type: string enum: - WEBAPP description: The type of the asset frontend required: - url - type title: AssetFrontendSummarized description: The frontend of the asset host: type: - object - 'null' properties: address: type: string description: The address of the asset host type: type: string enum: - DNS - IPV4 - IPV6 description: The type of the asset host required: - address - type title: AssetHostSummarized description: The host of the asset links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - service - frontend - host - links title: AssetSummarized description: Summarized information about an asset required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied /assets/bulk-update: post: tags: - Assets summary: Bulk update assets operationId: bulkUpdateAssets description: Update tags, projects, or status of multiple assets matching a filter predicate. requestBody: content: application/json: schema: type: object properties: where: type: object properties: assetIds: type: array items: type: string description: Filter by asset IDs types: type: array items: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: Filter by asset types statuses: type: array items: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: Filter by asset statuses tagIds: type: array items: type: string description: Tag IDs to assign projectIds: type: array items: type: string description: Project IDs to assign status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: New status to apply required: - where responses: '200': description: OK content: application/json: schema: type: object properties: success: type: boolean required: - success '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/bulk-delete: post: tags: - Assets summary: Bulk delete assets operationId: bulkDeleteAssets description: Schedule multiple assets matching a filter predicate for deletion. requestBody: content: application/json: schema: type: object properties: where: type: object properties: assetIds: type: array items: type: string description: Filter by asset IDs types: type: array items: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: Filter by asset types statuses: type: array items: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: Filter by asset statuses required: - where responses: '200': description: OK content: application/json: schema: type: object properties: success: type: boolean required: - success '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/{assetId}: get: tags: - Assets summary: Get an asset operationId: getAsset description: Get an asset by ID parameters: - schema: type: string description: The asset ID example: 00000000-0000-0000-0000-000000000000 required: true description: The asset ID name: assetId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: Detailed information about an asset '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist put: tags: - Assets summary: Update an asset operationId: updateAsset description: Update an asset by ID parameters: - schema: type: string description: The asset ID example: 00000000-0000-0000-0000-000000000000 required: true description: The asset ID name: assetId in: path requestBody: description: Body of the request to update an asset content: application/json: schema: type: object properties: tagIds: anyOf: - type: string - type: array items: type: string description: The tag IDs of the asset example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 owners: anyOf: - type: string - type: array items: type: string description: The owners of the asset projectIds: type: array items: type: string format: uuid description: The project IDs of the asset example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 framework: type: string enum: - FRONTEND_ANGULAR - FRONTEND_DJANGO - FRONTEND_JAVASCRIPT - FRONTEND_JQUERY - FRONTEND_REACT - FRONTEND_SVELTE - FRONTEND_VUE - GRAPHQL_APOLLO - GRAPHQL_GRAPHQLYOGA - REST_ASP_NET - REST_CLOJURE - REST_DJANGO - REST_EXPRESS_JS - REST_FASTAPI - REST_FLASK - REST_GIN - REST_HONO - REST_LARAVEL - REST_NESTJS - REST_NEXTJS - REST_NUXTJS - REST_RUBY_ON_RAILS - REST_SCALA_PLAY - REST_SPRING_BOOT - REST_SYMFONY - UNKNOWN description: The framework of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset description: type: string description: The description of the asset example: Updated asset description name: type: - string - 'null' description: The custom name of the asset. If not provided, the default name will be used. example: Customer API example: framework: REST_DJANGO status: DEPRECATED description: Updated asset description name: Customer API responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist delete: tags: - Assets summary: Delete an asset operationId: deleteAsset description: Delete an asset by ID parameters: - schema: type: string description: The asset ID example: 00000000-0000-0000-0000-000000000000 required: true description: The asset ID name: assetId in: path responses: '200': description: OK content: application/json: schema: type: object properties: message: type: string required: - message '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /assets/{assetId}/activities: get: tags: - Assets summary: List activities of an asset operationId: listAssetActivities description: List activities related to a specific asset. parameters: - schema: type: string format: uuid description: The asset ID example: 00000000-0000-0000-0000-000000000000 required: true description: The asset ID name: assetId in: path responses: '200': description: OK content: application/json: schema: type: array items: type: object properties: author: type: - object - 'null' properties: id: type: string description: The id of the author email: type: string description: The email of the author required: - id - email title: AuthorSummarized description: Summarized information about an author id: type: string format: uuid description: The id of the activity createdAt: type: string description: The date and time the activity was created kind: type: string enum: - ASSET_FOUND - ASSET_IGNORED - ASSET_UPDATED - COMMENT - ISSUE_FOUND - ISSUE_STATUS_CHANGED - OWNERS_NOTIFIED - SCHEMA_LINKED - SCHEMA_UNLINKED required: - author - id - createdAt - kind title: ActivitySummarized description: Summarized information about an activity '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist post: tags: - Assets summary: Comment on an asset operationId: createAssetComment description: Add a comment to an asset. parameters: - schema: type: string format: uuid description: The asset ID example: 00000000-0000-0000-0000-000000000000 required: true description: The asset ID name: assetId in: path requestBody: content: application/json: schema: type: object properties: comment: type: string minLength: 1 maxLength: 512 description: Comment text; maximum 512 characters required: - comment responses: '200': description: OK content: application/json: schema: type: object properties: author: type: - object - 'null' properties: id: type: string description: The id of the author email: type: string description: The email of the author required: - id - email title: AuthorSummarized description: Summarized information about an author id: type: string format: uuid description: The id of the activity createdAt: type: string description: The date and time the activity was created kind: type: string enum: - ASSET_FOUND - ASSET_IGNORED - ASSET_UPDATED - COMMENT - ISSUE_FOUND - ISSUE_STATUS_CHANGED - OWNERS_NOTIFIED - SCHEMA_LINKED - SCHEMA_UNLINKED required: - author - id - createdAt - kind '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /assets/dns: post: tags: - Assets summary: Create asset dns operationId: createAsset_DNS description: Create a dns requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' description: The custom name of the asset. If not provided, the default name will be used. example: My Asset asset_class: type: string enum: - HOST extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - DNS address: type: string favicon: type: - string - 'null' open_ports: type: - array - 'null' items: type: object properties: port: type: number protocols: type: array items: type: string enum: - SSH - HTTP - HTTP2 - HTTPS - PSQL - MYSQL - MSSQL location_ids: type: - array - 'null' items: type: string required: - port - protocols ports_insights: type: - array - 'null' items: type: number paths_insights: type: - array - 'null' items: type: object properties: path: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE parameters: type: - object - 'null' properties: parameters: type: - array - 'null' items: type: object properties: name: type: string in: type: string enum: - path - query - header - cookie required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowedReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' content: type: - object - 'null' additionalProperties: type: object properties: schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' encoding: type: - object - 'null' additionalProperties: type: object properties: contentType: type: - string - 'null' style: type: - string - 'null' headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' required: - name - in requestBody: type: - object - 'null' properties: required: type: - boolean - 'null' description: type: - string - 'null' content: type: - object - 'null' additionalProperties: type: object properties: schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' encoding: type: - object - 'null' additionalProperties: type: object properties: contentType: type: - string - 'null' style: type: - string - 'null' headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' returnType: type: - object - 'null' properties: responses: type: - object - 'null' additionalProperties: type: object properties: description: type: string headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' content: type: - object - 'null' additionalProperties: type: object properties: schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' encoding: type: - object - 'null' additionalProperties: type: object properties: contentType: type: - string - 'null' style: type: - string - 'null' headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' required: - description required: - path - method private: type: - boolean - 'null' third_party: type: - string - 'null' enum: - ADMINER - BACULA - BAREOS - CONFLUENCE - DOVECOT - DRONE - ELK_STACK - FREEAPI - GHOST - GITEA - GITHUB - GITLAB - GLUU_SERVER - GRAFANA - JENKINS - JIRA - KEYCLOAK - LEMONLDAP - MAILCOW - MATTERMOST - METABASE - MONGODB - MYSQL - NEXTCLOUD - OPENVPN - OWNCLOUD - PHP - PORTAINER - POSTFIX - POSTGRESQL - PROMETHEUS - RANCHER - REDMINE - RESTIC - ROCKET_CHAT - SEAFILE - SENTRY - SONAR - TAIGA - TEAMCITY - VAULT - WIREGUARD - WORDPRESS - ZULIP - SPLUNK - AIRFLOW - APIGEE - null dns_records: type: - array - 'null' items: type: object properties: name: type: string type: type: string ttl: type: number data: type: string required: - name - type - ttl - data ips: type: - array - 'null' items: type: string region_country_codes: type: - array - 'null' items: type: string registrar: type: - string - 'null' required: - asset_class - asset_type - address example: asset_class: HOST asset_type: DNS address: example.com responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/ipv4: post: tags: - Assets summary: Create asset ipv4 operationId: createAsset_IPV4 description: Create a ipv4 requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' description: The custom name of the asset. If not provided, the default name will be used. example: My Asset asset_class: type: string enum: - HOST extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - IPV4 address: type: string favicon: type: - string - 'null' open_ports: type: - array - 'null' items: type: object properties: port: type: number protocols: type: array items: type: string enum: - SSH - HTTP - HTTP2 - HTTPS - PSQL - MYSQL - MSSQL location_ids: type: - array - 'null' items: type: string required: - port - protocols ports_insights: type: - array - 'null' items: type: number paths_insights: type: - array - 'null' items: type: object properties: path: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE parameters: type: - object - 'null' properties: parameters: type: - array - 'null' items: type: object properties: name: type: string in: type: string enum: - path - query - header - cookie required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowedReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' content: type: - object - 'null' additionalProperties: type: object properties: schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' encoding: type: - object - 'null' additionalProperties: type: object properties: contentType: type: - string - 'null' style: type: - string - 'null' headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' required: - name - in requestBody: type: - object - 'null' properties: required: type: - boolean - 'null' description: type: - string - 'null' content: type: - object - 'null' additionalProperties: type: object properties: schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' encoding: type: - object - 'null' additionalProperties: type: object properties: contentType: type: - string - 'null' style: type: - string - 'null' headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' returnType: type: - object - 'null' properties: responses: type: - object - 'null' additionalProperties: type: object properties: description: type: string headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' content: type: - object - 'null' additionalProperties: type: object properties: schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' encoding: type: - object - 'null' additionalProperties: type: object properties: contentType: type: - string - 'null' style: type: - string - 'null' headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' required: - description required: - path - method private: type: - boolean - 'null' third_party: type: - string - 'null' enum: - ADMINER - BACULA - BAREOS - CONFLUENCE - DOVECOT - DRONE - ELK_STACK - FREEAPI - GHOST - GITEA - GITHUB - GITLAB - GLUU_SERVER - GRAFANA - JENKINS - JIRA - KEYCLOAK - LEMONLDAP - MAILCOW - MATTERMOST - METABASE - MONGODB - MYSQL - NEXTCLOUD - OPENVPN - OWNCLOUD - PHP - PORTAINER - POSTFIX - POSTGRESQL - PROMETHEUS - RANCHER - REDMINE - RESTIC - ROCKET_CHAT - SEAFILE - SENTRY - SONAR - TAIGA - TEAMCITY - VAULT - WIREGUARD - WORDPRESS - ZULIP - SPLUNK - AIRFLOW - APIGEE - null organization: type: - string - 'null' country: type: - string - 'null' required: - asset_class - asset_type - address example: asset_class: HOST asset_type: IPV4 address: 192.168.1.1 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/ipv6: post: tags: - Assets summary: Create asset ipv6 operationId: createAsset_IPV6 description: Create a ipv6 requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' description: The custom name of the asset. If not provided, the default name will be used. example: My Asset asset_class: type: string enum: - HOST extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - IPV6 address: type: string favicon: type: - string - 'null' open_ports: type: - array - 'null' items: type: object properties: port: type: number protocols: type: array items: type: string enum: - SSH - HTTP - HTTP2 - HTTPS - PSQL - MYSQL - MSSQL location_ids: type: - array - 'null' items: type: string required: - port - protocols ports_insights: type: - array - 'null' items: type: number paths_insights: type: - array - 'null' items: type: object properties: path: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE parameters: type: - object - 'null' properties: parameters: type: - array - 'null' items: type: object properties: name: type: string in: type: string enum: - path - query - header - cookie required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowedReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' content: type: - object - 'null' additionalProperties: type: object properties: schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' encoding: type: - object - 'null' additionalProperties: type: object properties: contentType: type: - string - 'null' style: type: - string - 'null' headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' required: - name - in requestBody: type: - object - 'null' properties: required: type: - boolean - 'null' description: type: - string - 'null' content: type: - object - 'null' additionalProperties: type: object properties: schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' encoding: type: - object - 'null' additionalProperties: type: object properties: contentType: type: - string - 'null' style: type: - string - 'null' headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' returnType: type: - object - 'null' properties: responses: type: - object - 'null' additionalProperties: type: object properties: description: type: string headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' content: type: - object - 'null' additionalProperties: type: object properties: schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' encoding: type: - object - 'null' additionalProperties: type: object properties: contentType: type: - string - 'null' style: type: - string - 'null' headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' required: - description required: - path - method private: type: - boolean - 'null' third_party: type: - string - 'null' enum: - ADMINER - BACULA - BAREOS - CONFLUENCE - DOVECOT - DRONE - ELK_STACK - FREEAPI - GHOST - GITEA - GITHUB - GITLAB - GLUU_SERVER - GRAFANA - JENKINS - JIRA - KEYCLOAK - LEMONLDAP - MAILCOW - MATTERMOST - METABASE - MONGODB - MYSQL - NEXTCLOUD - OPENVPN - OWNCLOUD - PHP - PORTAINER - POSTFIX - POSTGRESQL - PROMETHEUS - RANCHER - REDMINE - RESTIC - ROCKET_CHAT - SEAFILE - SENTRY - SONAR - TAIGA - TEAMCITY - VAULT - WIREGUARD - WORDPRESS - ZULIP - SPLUNK - AIRFLOW - APIGEE - null organization: type: - string - 'null' country: type: - string - 'null' required: - asset_class - asset_type - address example: asset_class: HOST asset_type: IPV6 address: 2001:0db8:85a3:0000:0000:8a2e:0370:7334 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/graphql: post: tags: - Assets summary: Create asset graphql operationId: createAsset_GRAPHQL description: Create a graphql requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' description: The custom name of the asset. If not provided, the default name will be used. example: My Asset asset_class: type: string enum: - API_SERVICE extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - GRAPHQL url: type: string favicon: type: - string - 'null' reachable_via: type: - array - 'null' items: type: string reachable_via_external_proxy: type: - boolean - 'null' private: type: - boolean - 'null' private_location_id: type: - string - 'null' environment: type: - string - 'null' enum: - DEVELOPMENT - STAGING - PRODUCTION - null cloud_provider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - VERCEL - UNKNOWN - null waf_provider: type: - string - 'null' enum: - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - YUNJIASU - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - WP_CERBER_SECURITY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - ACE_XML_GATEWAY - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - FIREPASS - TRAFFICSHIELD - FASTLY - FORTIWEB - AZURE_FRONT_DOOR - GODADDY_WEBSITE_PROTECTION - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - DATAPOWER - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KS_WAF - KONA_SITEDEFENDER - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - DATADOME - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - APPWALL - REBLAZE - RSFIREWALL - ASP_NET_WAF - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURE_ENTRY - EEYE_SECUREIIS - SECURESPHERE - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - UTM_WEB_PROTECTION - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRANSIP_WEB_FIREWALL - UEWAF - URLMASTER_SECURITYCHECK - URLSCAN - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - RAYWAF - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNSUO - YXLINK - ZENEDGE - ZSCALER - GOOGLE_CLOUD_APP_ARMOR - UNKNOWN - null auth_protocol: type: - string - 'null' enum: - BASIC - API_KEY - DIGEST - OAUTH - MTLS - SAML - LDAP - OIDC - HMAC - UNKNOWN - null auth_technology: type: - string - 'null' enum: - AUTH0 - COGNITO - KEYCLOAK - AWS_IAM - AZURE_ACTIVE_DIRECTORY - UNKNOWN - null third_party: type: - string - 'null' enum: - ADMINER - BACULA - BAREOS - CONFLUENCE - DOVECOT - DRONE - ELK_STACK - FREEAPI - GHOST - GITEA - GITHUB - GITLAB - GLUU_SERVER - GRAFANA - JENKINS - JIRA - KEYCLOAK - LEMONLDAP - MAILCOW - MATTERMOST - METABASE - MONGODB - MYSQL - NEXTCLOUD - OPENVPN - OWNCLOUD - PHP - PORTAINER - POSTFIX - POSTGRESQL - PROMETHEUS - RANCHER - REDMINE - RESTIC - ROCKET_CHAT - SEAFILE - SENTRY - SONAR - TAIGA - TEAMCITY - VAULT - WIREGUARD - WORDPRESS - ZULIP - SPLUNK - AIRFLOW - APIGEE - null ips: type: - array - 'null' items: type: string region_country_codes: type: - array - 'null' items: type: string framework: type: - string - 'null' enum: - GRAPHQL_APOLLO - GRAPHQL_GRAPHQLYOGA - null operations: type: - array - 'null' items: type: object properties: name: type: string type: type: string parameters: type: - array - 'null' items: type: object properties: name: type: string type: type: string required: - name - type returnType: type: - string - 'null' required: - name - type required: - asset_class - asset_type - url example: asset_class: API_SERVICE asset_type: GRAPHQL url: https://api.example.com/graphql responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/rest: post: tags: - Assets summary: Create asset rest operationId: createAsset_REST description: Create a rest requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' description: The custom name of the asset. If not provided, the default name will be used. example: My Asset asset_class: type: string enum: - API_SERVICE extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - REST url: type: string favicon: type: - string - 'null' reachable_via: type: - array - 'null' items: type: string reachable_via_external_proxy: type: - boolean - 'null' private: type: - boolean - 'null' private_location_id: type: - string - 'null' environment: type: - string - 'null' enum: - DEVELOPMENT - STAGING - PRODUCTION - null cloud_provider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - VERCEL - UNKNOWN - null waf_provider: type: - string - 'null' enum: - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - YUNJIASU - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - WP_CERBER_SECURITY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - ACE_XML_GATEWAY - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - FIREPASS - TRAFFICSHIELD - FASTLY - FORTIWEB - AZURE_FRONT_DOOR - GODADDY_WEBSITE_PROTECTION - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - DATAPOWER - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KS_WAF - KONA_SITEDEFENDER - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - DATADOME - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - APPWALL - REBLAZE - RSFIREWALL - ASP_NET_WAF - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURE_ENTRY - EEYE_SECUREIIS - SECURESPHERE - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - UTM_WEB_PROTECTION - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRANSIP_WEB_FIREWALL - UEWAF - URLMASTER_SECURITYCHECK - URLSCAN - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - RAYWAF - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNSUO - YXLINK - ZENEDGE - ZSCALER - GOOGLE_CLOUD_APP_ARMOR - UNKNOWN - null auth_protocol: type: - string - 'null' enum: - BASIC - API_KEY - DIGEST - OAUTH - MTLS - SAML - LDAP - OIDC - HMAC - UNKNOWN - null auth_technology: type: - string - 'null' enum: - AUTH0 - COGNITO - KEYCLOAK - AWS_IAM - AZURE_ACTIVE_DIRECTORY - UNKNOWN - null third_party: type: - string - 'null' enum: - ADMINER - BACULA - BAREOS - CONFLUENCE - DOVECOT - DRONE - ELK_STACK - FREEAPI - GHOST - GITEA - GITHUB - GITLAB - GLUU_SERVER - GRAFANA - JENKINS - JIRA - KEYCLOAK - LEMONLDAP - MAILCOW - MATTERMOST - METABASE - MONGODB - MYSQL - NEXTCLOUD - OPENVPN - OWNCLOUD - PHP - PORTAINER - POSTFIX - POSTGRESQL - PROMETHEUS - RANCHER - REDMINE - RESTIC - ROCKET_CHAT - SEAFILE - SENTRY - SONAR - TAIGA - TEAMCITY - VAULT - WIREGUARD - WORDPRESS - ZULIP - SPLUNK - AIRFLOW - APIGEE - null ips: type: - array - 'null' items: type: string region_country_codes: type: - array - 'null' items: type: string framework: type: - string - 'null' enum: - REST_DJANGO - REST_FLASK - REST_FASTAPI - REST_EXPRESS_JS - REST_SPRING_BOOT - REST_RUBY_ON_RAILS - REST_ASP_NET - REST_LARAVEL - REST_NESTJS - REST_SCALA_PLAY - REST_CLOJURE - REST_SYMFONY - REST_GIN - REST_HONO - REST_NEXTJS - REST_NUXTJS - null endpoints: type: - array - 'null' items: type: object properties: path: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE parameters: type: - object - 'null' properties: parameters: type: - array - 'null' items: type: object properties: name: type: string in: type: string enum: - path - query - header - cookie required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowedReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' content: type: - object - 'null' additionalProperties: type: object properties: schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' encoding: type: - object - 'null' additionalProperties: type: object properties: contentType: type: - string - 'null' style: type: - string - 'null' headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' required: - name - in requestBody: type: - object - 'null' properties: required: type: - boolean - 'null' description: type: - string - 'null' content: type: - object - 'null' additionalProperties: type: object properties: schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' encoding: type: - object - 'null' additionalProperties: type: object properties: contentType: type: - string - 'null' style: type: - string - 'null' headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' returnType: type: - object - 'null' properties: responses: type: - object - 'null' additionalProperties: type: object properties: description: type: string headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' content: type: - object - 'null' additionalProperties: type: object properties: schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' encoding: type: - object - 'null' additionalProperties: type: object properties: contentType: type: - string - 'null' style: type: - string - 'null' headers: type: - object - 'null' additionalProperties: type: object properties: required: type: - boolean - 'null' deprecated: type: - boolean - 'null' description: type: - string - 'null' style: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' schema: type: - object - 'null' additionalProperties: {} example: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' examples: type: - object - 'null' additionalProperties: type: object properties: summary: type: - string - 'null' description: type: - string - 'null' value: anyOf: - type: object additionalProperties: {} - type: array items: {} - type: string - type: number - type: number - type: boolean - type: 'null' externalValue: type: - string - 'null' explode: type: - boolean - 'null' allowReserved: type: - boolean - 'null' required: - description required: - path - method openapi_url: type: - string - 'null' required: - asset_class - asset_type - url example: asset_class: API_SERVICE asset_type: REST url: https://api.example.com/v1 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/grpc: post: tags: - Assets summary: Create asset grpc operationId: createAsset_GRPC description: Create a grpc requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' description: The custom name of the asset. If not provided, the default name will be used. example: My Asset asset_class: type: string enum: - API_SERVICE extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - GRPC url: type: string favicon: type: - string - 'null' reachable_via: type: - array - 'null' items: type: string reachable_via_external_proxy: type: - boolean - 'null' private: type: - boolean - 'null' private_location_id: type: - string - 'null' environment: type: - string - 'null' enum: - DEVELOPMENT - STAGING - PRODUCTION - null cloud_provider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - VERCEL - UNKNOWN - null waf_provider: type: - string - 'null' enum: - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - YUNJIASU - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - WP_CERBER_SECURITY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - ACE_XML_GATEWAY - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - FIREPASS - TRAFFICSHIELD - FASTLY - FORTIWEB - AZURE_FRONT_DOOR - GODADDY_WEBSITE_PROTECTION - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - DATAPOWER - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KS_WAF - KONA_SITEDEFENDER - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - DATADOME - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - APPWALL - REBLAZE - RSFIREWALL - ASP_NET_WAF - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURE_ENTRY - EEYE_SECUREIIS - SECURESPHERE - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - UTM_WEB_PROTECTION - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRANSIP_WEB_FIREWALL - UEWAF - URLMASTER_SECURITYCHECK - URLSCAN - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - RAYWAF - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNSUO - YXLINK - ZENEDGE - ZSCALER - GOOGLE_CLOUD_APP_ARMOR - UNKNOWN - null auth_protocol: type: - string - 'null' enum: - BASIC - API_KEY - DIGEST - OAUTH - MTLS - SAML - LDAP - OIDC - HMAC - UNKNOWN - null auth_technology: type: - string - 'null' enum: - AUTH0 - COGNITO - KEYCLOAK - AWS_IAM - AZURE_ACTIVE_DIRECTORY - UNKNOWN - null third_party: type: - string - 'null' enum: - ADMINER - BACULA - BAREOS - CONFLUENCE - DOVECOT - DRONE - ELK_STACK - FREEAPI - GHOST - GITEA - GITHUB - GITLAB - GLUU_SERVER - GRAFANA - JENKINS - JIRA - KEYCLOAK - LEMONLDAP - MAILCOW - MATTERMOST - METABASE - MONGODB - MYSQL - NEXTCLOUD - OPENVPN - OWNCLOUD - PHP - PORTAINER - POSTFIX - POSTGRESQL - PROMETHEUS - RANCHER - REDMINE - RESTIC - ROCKET_CHAT - SEAFILE - SENTRY - SONAR - TAIGA - TEAMCITY - VAULT - WIREGUARD - WORDPRESS - ZULIP - SPLUNK - AIRFLOW - APIGEE - null ips: type: - array - 'null' items: type: string region_country_codes: type: - array - 'null' items: type: string required: - asset_class - asset_type - url example: asset_class: API_SERVICE asset_type: GRPC url: grpc://api.example.com:50051 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/websocket: post: tags: - Assets summary: Create asset websocket operationId: createAsset_WEBSOCKET description: Create a websocket requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' description: The custom name of the asset. If not provided, the default name will be used. example: My Asset asset_class: type: string enum: - API_SERVICE extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - WEBSOCKET url: type: string favicon: type: - string - 'null' reachable_via: type: - array - 'null' items: type: string reachable_via_external_proxy: type: - boolean - 'null' private: type: - boolean - 'null' private_location_id: type: - string - 'null' environment: type: - string - 'null' enum: - DEVELOPMENT - STAGING - PRODUCTION - null cloud_provider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - VERCEL - UNKNOWN - null waf_provider: type: - string - 'null' enum: - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - YUNJIASU - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - WP_CERBER_SECURITY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - ACE_XML_GATEWAY - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - FIREPASS - TRAFFICSHIELD - FASTLY - FORTIWEB - AZURE_FRONT_DOOR - GODADDY_WEBSITE_PROTECTION - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - DATAPOWER - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KS_WAF - KONA_SITEDEFENDER - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - DATADOME - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - APPWALL - REBLAZE - RSFIREWALL - ASP_NET_WAF - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURE_ENTRY - EEYE_SECUREIIS - SECURESPHERE - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - UTM_WEB_PROTECTION - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRANSIP_WEB_FIREWALL - UEWAF - URLMASTER_SECURITYCHECK - URLSCAN - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - RAYWAF - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNSUO - YXLINK - ZENEDGE - ZSCALER - GOOGLE_CLOUD_APP_ARMOR - UNKNOWN - null auth_protocol: type: - string - 'null' enum: - BASIC - API_KEY - DIGEST - OAUTH - MTLS - SAML - LDAP - OIDC - HMAC - UNKNOWN - null auth_technology: type: - string - 'null' enum: - AUTH0 - COGNITO - KEYCLOAK - AWS_IAM - AZURE_ACTIVE_DIRECTORY - UNKNOWN - null third_party: type: - string - 'null' enum: - ADMINER - BACULA - BAREOS - CONFLUENCE - DOVECOT - DRONE - ELK_STACK - FREEAPI - GHOST - GITEA - GITHUB - GITLAB - GLUU_SERVER - GRAFANA - JENKINS - JIRA - KEYCLOAK - LEMONLDAP - MAILCOW - MATTERMOST - METABASE - MONGODB - MYSQL - NEXTCLOUD - OPENVPN - OWNCLOUD - PHP - PORTAINER - POSTFIX - POSTGRESQL - PROMETHEUS - RANCHER - REDMINE - RESTIC - ROCKET_CHAT - SEAFILE - SENTRY - SONAR - TAIGA - TEAMCITY - VAULT - WIREGUARD - WORDPRESS - ZULIP - SPLUNK - AIRFLOW - APIGEE - null ips: type: - array - 'null' items: type: string region_country_codes: type: - array - 'null' items: type: string required: - asset_class - asset_type - url responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/mcp: post: tags: - Assets summary: Create asset mcp operationId: createAsset_MCP description: Create a mcp requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' description: The custom name of the asset. If not provided, the default name will be used. example: My Asset asset_class: type: string enum: - API_SERVICE extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - MCP url: type: string favicon: type: - string - 'null' reachable_via: type: - array - 'null' items: type: string reachable_via_external_proxy: type: - boolean - 'null' private: type: - boolean - 'null' private_location_id: type: - string - 'null' environment: type: - string - 'null' enum: - DEVELOPMENT - STAGING - PRODUCTION - null cloud_provider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - VERCEL - UNKNOWN - null waf_provider: type: - string - 'null' enum: - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - YUNJIASU - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - WP_CERBER_SECURITY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - ACE_XML_GATEWAY - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - FIREPASS - TRAFFICSHIELD - FASTLY - FORTIWEB - AZURE_FRONT_DOOR - GODADDY_WEBSITE_PROTECTION - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - DATAPOWER - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KS_WAF - KONA_SITEDEFENDER - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - DATADOME - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - APPWALL - REBLAZE - RSFIREWALL - ASP_NET_WAF - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURE_ENTRY - EEYE_SECUREIIS - SECURESPHERE - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - UTM_WEB_PROTECTION - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRANSIP_WEB_FIREWALL - UEWAF - URLMASTER_SECURITYCHECK - URLSCAN - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - RAYWAF - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNSUO - YXLINK - ZENEDGE - ZSCALER - GOOGLE_CLOUD_APP_ARMOR - UNKNOWN - null auth_protocol: type: - string - 'null' enum: - BASIC - API_KEY - DIGEST - OAUTH - MTLS - SAML - LDAP - OIDC - HMAC - UNKNOWN - null auth_technology: type: - string - 'null' enum: - AUTH0 - COGNITO - KEYCLOAK - AWS_IAM - AZURE_ACTIVE_DIRECTORY - UNKNOWN - null third_party: type: - string - 'null' enum: - ADMINER - BACULA - BAREOS - CONFLUENCE - DOVECOT - DRONE - ELK_STACK - FREEAPI - GHOST - GITEA - GITHUB - GITLAB - GLUU_SERVER - GRAFANA - JENKINS - JIRA - KEYCLOAK - LEMONLDAP - MAILCOW - MATTERMOST - METABASE - MONGODB - MYSQL - NEXTCLOUD - OPENVPN - OWNCLOUD - PHP - PORTAINER - POSTFIX - POSTGRESQL - PROMETHEUS - RANCHER - REDMINE - RESTIC - ROCKET_CHAT - SEAFILE - SENTRY - SONAR - TAIGA - TEAMCITY - VAULT - WIREGUARD - WORDPRESS - ZULIP - SPLUNK - AIRFLOW - APIGEE - null ips: type: - array - 'null' items: type: string region_country_codes: type: - array - 'null' items: type: string required: - asset_class - asset_type - url responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/soap: post: tags: - Assets summary: Create asset soap operationId: createAsset_SOAP description: Create a soap requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' description: The custom name of the asset. If not provided, the default name will be used. example: My Asset asset_class: type: string enum: - API_SERVICE extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - SOAP url: type: string favicon: type: - string - 'null' reachable_via: type: - array - 'null' items: type: string reachable_via_external_proxy: type: - boolean - 'null' private: type: - boolean - 'null' private_location_id: type: - string - 'null' environment: type: - string - 'null' enum: - DEVELOPMENT - STAGING - PRODUCTION - null cloud_provider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - VERCEL - UNKNOWN - null waf_provider: type: - string - 'null' enum: - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - YUNJIASU - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - WP_CERBER_SECURITY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - ACE_XML_GATEWAY - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - FIREPASS - TRAFFICSHIELD - FASTLY - FORTIWEB - AZURE_FRONT_DOOR - GODADDY_WEBSITE_PROTECTION - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - DATAPOWER - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KS_WAF - KONA_SITEDEFENDER - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - DATADOME - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - APPWALL - REBLAZE - RSFIREWALL - ASP_NET_WAF - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURE_ENTRY - EEYE_SECUREIIS - SECURESPHERE - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - UTM_WEB_PROTECTION - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRANSIP_WEB_FIREWALL - UEWAF - URLMASTER_SECURITYCHECK - URLSCAN - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - RAYWAF - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNSUO - YXLINK - ZENEDGE - ZSCALER - GOOGLE_CLOUD_APP_ARMOR - UNKNOWN - null auth_protocol: type: - string - 'null' enum: - BASIC - API_KEY - DIGEST - OAUTH - MTLS - SAML - LDAP - OIDC - HMAC - UNKNOWN - null auth_technology: type: - string - 'null' enum: - AUTH0 - COGNITO - KEYCLOAK - AWS_IAM - AZURE_ACTIVE_DIRECTORY - UNKNOWN - null third_party: type: - string - 'null' enum: - ADMINER - BACULA - BAREOS - CONFLUENCE - DOVECOT - DRONE - ELK_STACK - FREEAPI - GHOST - GITEA - GITHUB - GITLAB - GLUU_SERVER - GRAFANA - JENKINS - JIRA - KEYCLOAK - LEMONLDAP - MAILCOW - MATTERMOST - METABASE - MONGODB - MYSQL - NEXTCLOUD - OPENVPN - OWNCLOUD - PHP - PORTAINER - POSTFIX - POSTGRESQL - PROMETHEUS - RANCHER - REDMINE - RESTIC - ROCKET_CHAT - SEAFILE - SENTRY - SONAR - TAIGA - TEAMCITY - VAULT - WIREGUARD - WORDPRESS - ZULIP - SPLUNK - AIRFLOW - APIGEE - null ips: type: - array - 'null' items: type: string region_country_codes: type: - array - 'null' items: type: string required: - asset_class - asset_type - url responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/webapp: post: tags: - Assets summary: Create asset webapp operationId: createAsset_WEBAPP description: Create a webapp requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' description: The custom name of the asset. If not provided, the default name will be used. example: My Asset asset_class: type: string enum: - FRONTEND extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - WEBAPP url: type: string favicon: type: - string - 'null' reachable_via: type: - array - 'null' items: type: string reachable_via_external_proxy: type: - boolean - 'null' private: type: - boolean - 'null' private_location_id: type: - string - 'null' framework: type: - string - 'null' enum: - FRONTEND_REACT - FRONTEND_VUE - FRONTEND_ANGULAR - FRONTEND_SVELTE - FRONTEND_JQUERY - FRONTEND_JAVASCRIPT - FRONTEND_DJANGO - null environment: type: - string - 'null' enum: - DEVELOPMENT - STAGING - PRODUCTION - null cloud_provider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - VERCEL - UNKNOWN - null waf_provider: type: - string - 'null' enum: - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - YUNJIASU - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - WP_CERBER_SECURITY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - ACE_XML_GATEWAY - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - FIREPASS - TRAFFICSHIELD - FASTLY - FORTIWEB - AZURE_FRONT_DOOR - GODADDY_WEBSITE_PROTECTION - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - DATAPOWER - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KS_WAF - KONA_SITEDEFENDER - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - DATADOME - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - APPWALL - REBLAZE - RSFIREWALL - ASP_NET_WAF - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURE_ENTRY - EEYE_SECUREIIS - SECURESPHERE - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - UTM_WEB_PROTECTION - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRANSIP_WEB_FIREWALL - UEWAF - URLMASTER_SECURITYCHECK - URLSCAN - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - RAYWAF - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNSUO - YXLINK - ZENEDGE - ZSCALER - GOOGLE_CLOUD_APP_ARMOR - UNKNOWN - null captcha_provider: type: - string - 'null' enum: - RECAPTCHA - HCAPTCHA - CLOUDFLARE_TURNSTILE - GEETEST - FRIENDLY_CAPTCHA - AWS_WAF_CAPTCHA - MTCAPTCHA - YANDEX_SMARTCAPTCHA - ARCAPTCHA - ALTCHA - FUNCAPTCHA - SLIDER_CAPTCHA - PICATCHA - SNAPHOST - STARTEST - ADCAPTCHA - V4GUARD_CHECKPOINT - COINHIVE_CAPTCHA - RINGCAPTCHA - REALLY_SIMPLE_CAPTCHA - OTHER - null auth_protocol: type: - string - 'null' enum: - BASIC - API_KEY - DIGEST - OAUTH - MTLS - SAML - LDAP - OIDC - HMAC - UNKNOWN - null auth_technology: type: - string - 'null' enum: - AUTH0 - COGNITO - KEYCLOAK - AWS_IAM - AZURE_ACTIVE_DIRECTORY - UNKNOWN - null third_party: type: - string - 'null' enum: - ADMINER - BACULA - BAREOS - CONFLUENCE - DOVECOT - DRONE - ELK_STACK - FREEAPI - GHOST - GITEA - GITHUB - GITLAB - GLUU_SERVER - GRAFANA - JENKINS - JIRA - KEYCLOAK - LEMONLDAP - MAILCOW - MATTERMOST - METABASE - MONGODB - MYSQL - NEXTCLOUD - OPENVPN - OWNCLOUD - PHP - PORTAINER - POSTFIX - POSTGRESQL - PROMETHEUS - RANCHER - REDMINE - RESTIC - ROCKET_CHAT - SEAFILE - SENTRY - SONAR - TAIGA - TEAMCITY - VAULT - WIREGUARD - WORDPRESS - ZULIP - SPLUNK - AIRFLOW - APIGEE - null ips: type: - array - 'null' items: type: string region_country_codes: type: - array - 'null' items: type: string login_page: type: - object - 'null' properties: login: type: string enum: - none - optional - mandatory login_type: type: array items: type: string enum: - username - email - phone - sso login_page_url: type: - string - 'null' can_register: type: boolean register_page_url: type: - string - 'null' sso_providers: type: array items: type: string required: - login - login_type - can_register - sso_providers required: - asset_class - asset_type - url example: asset_class: FRONTEND asset_type: WEBAPP url: https://app.example.com responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/azure-tenant: post: tags: - Assets summary: Create asset azure-tenant operationId: createAsset_AZURE_TENANT description: Create a azure-tenant requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' asset_class: type: string enum: - CLOUD_HOSTING extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - AZURE_TENANT immutable_key: type: string client_id: type: string client_secret: type: string tenant_id: type: string required: - asset_class - asset_type - immutable_key - client_id - client_secret - tenant_id responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/ipv4-range: post: tags: - Assets summary: Create asset ipv4-range operationId: createAsset_IPV4_RANGE description: Create a ipv4-range requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' description: The custom name of the asset. If not provided, the default name will be used. example: My Asset asset_class: type: string enum: - NETWORK extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - IPV4_RANGE cidr: type: string private: type: - boolean - 'null' private_location_id: type: - string - 'null' required: - asset_class - asset_type - cidr responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/gitlab-repository: post: tags: - Assets summary: Create asset gitlab-repository operationId: createAsset_GITLAB_REPOSITORY description: Create a gitlab-repository requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' asset_class: type: string enum: - REPOSITORY extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - GITLAB_REPOSITORY url: type: string http_url_to_repo: type: - string - 'null' description: type: - string - 'null' location_id: type: - string - 'null' default_branch: type: - string - 'null' blob_base_url: type: - string - 'null' last_commit: type: - object - 'null' properties: sha: type: string timestamp_iso: type: string required: - sha - timestamp_iso owners: type: - array - 'null' items: type: object properties: email: type: string required: - email languages: type: - array - 'null' items: type: string enum: - PYTHON - JAVASCRIPT - TYPESCRIPT - JAVA - C - CPP - CSHARP - RUST - PHP - RUBY - SWIFT - KOTLIN - GO group_id: type: - number - 'null' group_full_path: type: - string - 'null' group_web_url: type: - string - 'null' project_id: type: - number - 'null' archived: type: - boolean - 'null' visibility: type: - string - 'null' enum: - PRIVATE - INTERNAL - PUBLIC - null group: type: - object - 'null' properties: asset_class: type: string enum: - SOURCE_CODE_MANAGEMENT extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - GITLAB_GROUP name: type: - string - 'null' immutable_key: type: string api_key: type: string instance_url: type: - string - 'null' location_id: type: - string - 'null' required: - asset_class - asset_type - immutable_key - api_key required: - asset_class - asset_type - url responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/github-repository: post: tags: - Assets summary: Create asset github-repository operationId: createAsset_GITHUB_REPOSITORY description: Create a github-repository requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' asset_class: type: string enum: - REPOSITORY extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - GITHUB_REPOSITORY url: type: string http_url_to_repo: type: - string - 'null' description: type: - string - 'null' location_id: type: - string - 'null' default_branch: type: - string - 'null' blob_base_url: type: - string - 'null' last_commit: type: - object - 'null' properties: sha: type: string timestamp_iso: type: string required: - sha - timestamp_iso owners: type: - array - 'null' items: type: object properties: email: type: string required: - email languages: type: - array - 'null' items: type: string enum: - PYTHON - JAVASCRIPT - TYPESCRIPT - JAVA - C - CPP - CSHARP - RUST - PHP - RUBY - SWIFT - KOTLIN - GO owner_id: type: - number - 'null' owner_login: type: - string - 'null' owner_html_url: type: - string - 'null' fork: type: - boolean - 'null' archived: type: - boolean - 'null' disabled: type: - boolean - 'null' clonable: type: - boolean - 'null' private: type: - boolean - 'null' org: type: - object - 'null' properties: asset_class: type: string enum: - SOURCE_CODE_MANAGEMENT extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - GITHUB_ORGANIZATION name: type: - string - 'null' immutable_key: type: string api_key: type: string location_id: type: - string - 'null' required: - asset_class - asset_type - immutable_key - api_key required: - asset_class - asset_type - url responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/bitbucket-repository: post: tags: - Assets summary: Create asset bitbucket-repository operationId: createAsset_BITBUCKET_REPOSITORY description: Create a bitbucket-repository requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' asset_class: type: string enum: - REPOSITORY extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - BITBUCKET_REPOSITORY url: type: string http_url_to_repo: type: - string - 'null' description: type: - string - 'null' location_id: type: - string - 'null' default_branch: type: - string - 'null' blob_base_url: type: - string - 'null' last_commit: type: - object - 'null' properties: sha: type: string timestamp_iso: type: string required: - sha - timestamp_iso owners: type: - array - 'null' items: type: object properties: email: type: string required: - email languages: type: - array - 'null' items: type: string enum: - PYTHON - JAVASCRIPT - TYPESCRIPT - JAVA - C - CPP - CSHARP - RUST - PHP - RUBY - SWIFT - KOTLIN - GO workspace_name: type: - string - 'null' repository_name: type: - string - 'null' is_private: type: - boolean - 'null' org: type: - object - 'null' properties: asset_class: type: string enum: - SOURCE_CODE_MANAGEMENT extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - BITBUCKET_ORGANIZATION name: type: - string - 'null' immutable_key: type: string email: type: string api_key: type: string workspace_slug: type: string location_id: type: - string - 'null' required: - asset_class - asset_type - immutable_key - email - api_key - workspace_slug required: - asset_class - asset_type - url responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/code-project: post: tags: - Assets summary: Create asset code-project operationId: createAsset_CODE_PROJECT description: Create a code-project requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' asset_class: type: string enum: - CODE_PROJECT extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - CODE_PROJECT repository: oneOf: - type: object properties: asset_class: type: string enum: - REPOSITORY extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - GITLAB_REPOSITORY url: type: string name: type: - string - 'null' http_url_to_repo: type: - string - 'null' description: type: - string - 'null' location_id: type: - string - 'null' default_branch: type: - string - 'null' blob_base_url: type: - string - 'null' last_commit: type: - object - 'null' properties: sha: type: string timestamp_iso: type: string required: - sha - timestamp_iso owners: type: - array - 'null' items: type: object properties: email: type: string required: - email languages: type: - array - 'null' items: type: string enum: - PYTHON - JAVASCRIPT - TYPESCRIPT - JAVA - C - CPP - CSHARP - RUST - PHP - RUBY - SWIFT - KOTLIN - GO group_id: type: - number - 'null' group_full_path: type: - string - 'null' group_web_url: type: - string - 'null' project_id: type: - number - 'null' archived: type: - boolean - 'null' visibility: type: - string - 'null' enum: - PRIVATE - INTERNAL - PUBLIC - null group: type: - object - 'null' properties: asset_class: type: string enum: - SOURCE_CODE_MANAGEMENT extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - GITLAB_GROUP name: type: - string - 'null' immutable_key: type: string api_key: type: string instance_url: type: - string - 'null' location_id: type: - string - 'null' required: - asset_class - asset_type - immutable_key - api_key required: - asset_class - asset_type - url - type: object properties: asset_class: type: string enum: - REPOSITORY extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - GITHUB_REPOSITORY url: type: string name: type: - string - 'null' http_url_to_repo: type: - string - 'null' description: type: - string - 'null' location_id: type: - string - 'null' default_branch: type: - string - 'null' blob_base_url: type: - string - 'null' last_commit: type: - object - 'null' properties: sha: type: string timestamp_iso: type: string required: - sha - timestamp_iso owners: type: - array - 'null' items: type: object properties: email: type: string required: - email languages: type: - array - 'null' items: type: string enum: - PYTHON - JAVASCRIPT - TYPESCRIPT - JAVA - C - CPP - CSHARP - RUST - PHP - RUBY - SWIFT - KOTLIN - GO owner_id: type: - number - 'null' owner_login: type: - string - 'null' owner_html_url: type: - string - 'null' fork: type: - boolean - 'null' archived: type: - boolean - 'null' disabled: type: - boolean - 'null' clonable: type: - boolean - 'null' private: type: - boolean - 'null' org: type: - object - 'null' properties: asset_class: type: string enum: - SOURCE_CODE_MANAGEMENT extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - GITHUB_ORGANIZATION name: type: - string - 'null' immutable_key: type: string api_key: type: string location_id: type: - string - 'null' required: - asset_class - asset_type - immutable_key - api_key required: - asset_class - asset_type - url - type: object properties: asset_class: type: string enum: - REPOSITORY extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - BITBUCKET_REPOSITORY url: type: string name: type: - string - 'null' http_url_to_repo: type: - string - 'null' description: type: - string - 'null' location_id: type: - string - 'null' default_branch: type: - string - 'null' blob_base_url: type: - string - 'null' last_commit: type: - object - 'null' properties: sha: type: string timestamp_iso: type: string required: - sha - timestamp_iso owners: type: - array - 'null' items: type: object properties: email: type: string required: - email languages: type: - array - 'null' items: type: string enum: - PYTHON - JAVASCRIPT - TYPESCRIPT - JAVA - C - CPP - CSHARP - RUST - PHP - RUBY - SWIFT - KOTLIN - GO workspace_name: type: - string - 'null' repository_name: type: - string - 'null' is_private: type: - boolean - 'null' org: type: - object - 'null' properties: asset_class: type: string enum: - SOURCE_CODE_MANAGEMENT extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - BITBUCKET_ORGANIZATION name: type: - string - 'null' immutable_key: type: string email: type: string api_key: type: string workspace_slug: type: string location_id: type: - string - 'null' required: - asset_class - asset_type - immutable_key - email - api_key - workspace_slug required: - asset_class - asset_type - url path: type: string language: type: string enum: - PYTHON - JAVASCRIPT - TYPESCRIPT - JAVA - C - CPP - CSHARP - RUST - PHP - RUBY - SWIFT - KOTLIN - GO http_url_to_project: type: - string - 'null' owners: type: - array - 'null' items: type: object properties: email: type: string required: - email last_commit: type: - object - 'null' properties: sha: type: string timestamp_iso: type: string required: - sha - timestamp_iso required: - asset_class - asset_type - repository - path - language responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/aws-lambda: post: tags: - Assets summary: Create asset aws-lambda operationId: createAsset_AWS_LAMBDA description: Create a aws-lambda requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: string asset_class: type: string enum: - CLOUD_COMPONENT extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - AWS_LAMBDA function_arn: type: string runtime: type: - string - 'null' description: type: - string - 'null' function_url: type: - string - 'null' required: - name - asset_class - asset_type - function_arn responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/package: post: tags: - Assets summary: Create asset package operationId: createAsset_PACKAGE description: Create a package requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' description: The custom name of the asset. If not provided, the default name will be used. example: My Asset asset_class: type: string enum: - TECHNOLOGY extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - PACKAGE technology_key: type: string version: type: - string - 'null' reference_url: type: - string - 'null' cpe: type: - string - 'null' cpe_guessed: type: - boolean - 'null' well_known_technology: type: - string - 'null' enum: - REDIS - NGINX - APACHE - REACT - ANGULAR - VUE - SVELTE - null description: type: - string - 'null' purl: type: string package_type: type: string enum: - ALPM - APK - BAZEL - BITBUCKET - BITNAMI - CARGO - COCOAPODS - COMPOSER - CONAN - CONDA - CPAN - CRAN - DEB - DOCKER - GEM - GENERIC - GITHUB - GO - HACKAGE - HEX - HUGGINGFACE - JULIA - LUAROCKS - MAVEN - MLFLOW - NPM - NUGET - OCI - OPAM - OTP - PUB - PYPI - QPKG - RPM - SWID - SWIFT - VSCODE_EXTENSION - YOCTO required: - asset_class - asset_type - technology_key - purl - package_type responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/software: post: tags: - Assets summary: Create asset software operationId: createAsset_SOFTWARE description: Create a software requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. name: type: - string - 'null' description: The custom name of the asset. If not provided, the default name will be used. example: My Asset asset_class: type: string enum: - TECHNOLOGY extra_metadata: type: - object - 'null' additionalProperties: {} screenshot_s3_key: type: - string - 'null' asset_type: type: string enum: - SOFTWARE technology_key: type: string version: type: - string - 'null' reference_url: type: - string - 'null' cpe: type: - string - 'null' cpe_guessed: type: - boolean - 'null' well_known_technology: type: - string - 'null' enum: - REDIS - NGINX - APACHE - REACT - ANGULAR - VUE - SVELTE - null description: type: - string - 'null' required: - asset_class - asset_type - technology_key responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /assets/schema: post: tags: - Assets summary: Create asset schema operationId: createAsset_schema description: "Create a schema asset.\n\nThe schema data can either be fetched from a URL or uploaded from a file.\n\n\ **Fetch example:**\n```json\n{\n \"asset_type\": \"SCHEMA\",\n \"fetch\": {\n \"url\": \"https://api.example.com/v1\"\ \n }\n}\n```\n\n\n**Upload example:**\n\nThe file should first be uploaded to the Escape Platform using the [upload\ \ endpoint](/v3/#tag/upload/post/upload/signed-url).\n\nThe upload endpoint returns an `id` that should be used in\ \ the `temporaryObjectKey` field.\n\n```json\n{\n \"asset_type\": \"SCHEMA\",\n \"upload\": {\n \"temporaryObjectKey\"\ : \"00000000-0000-0000-0000-000000000000\"\n }\n}\n```\n" requestBody: description: Body of the request to create a schema asset content: application/json: schema: anyOf: - type: object properties: asset_type: type: string enum: - SCHEMA name: type: - string - 'null' example: My Schema projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. fetch: type: object properties: url: type: string example: https://api.example.com/v1 proxyId: type: string example: 00000000-0000-0000-0000-000000000000 required: - url authentication: type: object properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' description: The authentication object of the asset examples: - users: - name: public - presets: - type: headers users: - username: test-user headers: Authorization: Basic dXNlcjpwYXNz authenticationStr: type: string description: Deprecated. Use `authentication` object instead. JSON-encoded authentication object. deprecated: true examples: - '{"users":[{"name":"public"}]}' - '{"presets":[{"type":"headers","users":[{"username":"test-user","headers":{"Authorization":"Basic dXNlcjpwYXNz"}}]}]}' required: - asset_type - fetch title: Create schema via fetch - type: object properties: asset_type: type: string enum: - SCHEMA name: type: - string - 'null' example: My Schema projectIds: type: - array - 'null' items: type: string format: uuid description: The list of project IDs bind the asset on. upload: type: object properties: temporaryObjectKey: type: string example: 00000000-0000-0000-0000-000000000000 required: - temporaryObjectKey required: - asset_type - upload title: Create schema via upload title: Create asset schema request responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /scans: get: tags: - Scans summary: List scans operationId: listScans description: List and search scans of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - SEVERITY - createdAt description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: string description: Filter by after date example: '2025-03-15T09:00:00Z' required: false description: Filter by after date name: after in: query - schema: type: string description: Filter by before date example: '2025-03-15T09:00:00Z' required: false description: Filter by before date name: before in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by asset IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by asset IDs name: assetIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by profile IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by profile IDs name: profileIds in: query - schema: type: string enum: - 'true' - 'false' example: 'true' description: Filter by ignored status required: false description: Filter by ignored status name: ignored in: query - schema: type: array items: type: string enum: - APPLICATION_CREATION - CI - INVENTORY - MANUAL - SCHEDULED - UNKNOWN description: Filter by initiator required: false description: Filter by initiator name: initiator in: query - schema: type: array items: type: string enum: - ASM_AKAMAI_ACCOUNT - ASM_AWS_ACCOUNT - ASM_AWS_LAMBDA - ASM_AZURE_TENANT - ASM_BITBUCKET_ORGANIZATION - ASM_BITBUCKET_REPOSITORY - ASM_BURPSUITE_EXPORT - ASM_CLOUDFLARE_ACCOUNT - ASM_CODE_PROJECT - ASM_DNS - ASM_GCP_PROJECT - ASM_GITHUB_ORGANIZATION - ASM_GITHUB_REPOSITORY - ASM_GITLAB_GROUP - ASM_GITLAB_REPOSITORY - ASM_GRAPHQL - ASM_GRAPHQL_SCHEMA - ASM_GRPC - ASM_HAR_EXPORT - ASM_INSOMNIA - ASM_IPV4 - ASM_IPV4_RANGE - ASM_IPV6 - ASM_KUBERNETES_CLUSTER - ASM_MCP - ASM_OPENAPI - ASM_PACKAGE - ASM_POSTMAN_COLLECTION - ASM_POSTMAN_ENVIRONMENT - ASM_POSTMAN_ORGANIZATION - ASM_REST - ASM_SOAP - ASM_SOFTWARE - ASM_WEBAPP - ASM_WEBSOCKET - ASM_WIZ_ACCOUNT - ASM_WP_JSON - AUTOMATED_PENTEST_GRAPHQL - AUTOMATED_PENTEST_REST - AUTOMATED_PENTEST_WEBAPP - BLST_GRAPHQL - BLST_REST - FRONTEND_DAST description: Filter by kind required: false description: Filter by kind name: kinds in: query - schema: type: array items: type: string enum: - CANCELED - FAILED - FINISHED - RUNNING - STARTING description: Filter by status required: false description: Filter by status name: status in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by project IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by project IDs name: projectIds in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: Summarized information about a scan required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Scans summary: Start a new scan operationId: startScan description: Start a new scan requestBody: description: Body of the request to start a new scan content: application/json: schema: type: object properties: profileId: type: string description: The profile ID to use example: 00000000-0000-0000-0000-000000000000 commitHash: type: string description: The commit hash to scan example: abc123 commitLink: type: string description: The commit link to scan example: https://example.com/example commitBranch: type: string description: The commit branch to scan example: master commitAuthor: type: string description: The commit author to scan example: alice commitAuthorProfilePictureLink: type: string description: The commit author profile picture link to scan example: https://example.com/example.png configurationOverride: description: The configuration override to use examples: - mode: read_write - '{"mode":"read_write"}' initiator: type: - string - 'null' enum: - CI - MANUAL - SCHEDULED - null default: CI description: The initiator of the scan required: - profileId example: profileId: 00000000-0000-0000-0000-000000000000 initiator: MANUAL responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /scans/problems: get: tags: - Scans summary: List scans with their problems operationId: scansProblems description: List scans together with the validation problems surfaced by the scanner during execution. Diagnostic counterpart of GET /v3/profiles/problems, but indexed by scan instead of profile. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - SEVERITY - createdAt description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: string description: Filter by after date example: '2025-03-15T09:00:00Z' required: false description: Filter by after date name: after in: query - schema: type: string description: Filter by before date example: '2025-03-15T09:00:00Z' required: false description: Filter by before date name: before in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by asset IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by asset IDs name: assetIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by profile IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by profile IDs name: profileIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by project IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by project IDs name: projectIds in: query - schema: type: string enum: - 'true' - 'false' example: 'true' description: Filter by ignored status required: false description: Filter by ignored status name: ignored in: query - schema: type: array items: type: string enum: - APPLICATION_CREATION - CI - INVENTORY - MANUAL - SCHEDULED - UNKNOWN description: Filter by initiator required: false description: Filter by initiator name: initiator in: query - schema: type: array items: type: string enum: - ASM_AKAMAI_ACCOUNT - ASM_AWS_ACCOUNT - ASM_AWS_LAMBDA - ASM_AZURE_TENANT - ASM_BITBUCKET_ORGANIZATION - ASM_BITBUCKET_REPOSITORY - ASM_BURPSUITE_EXPORT - ASM_CLOUDFLARE_ACCOUNT - ASM_CODE_PROJECT - ASM_DNS - ASM_GCP_PROJECT - ASM_GITHUB_ORGANIZATION - ASM_GITHUB_REPOSITORY - ASM_GITLAB_GROUP - ASM_GITLAB_REPOSITORY - ASM_GRAPHQL - ASM_GRAPHQL_SCHEMA - ASM_GRPC - ASM_HAR_EXPORT - ASM_INSOMNIA - ASM_IPV4 - ASM_IPV4_RANGE - ASM_IPV6 - ASM_KUBERNETES_CLUSTER - ASM_MCP - ASM_OPENAPI - ASM_PACKAGE - ASM_POSTMAN_COLLECTION - ASM_POSTMAN_ENVIRONMENT - ASM_POSTMAN_ORGANIZATION - ASM_REST - ASM_SOAP - ASM_SOFTWARE - ASM_WEBAPP - ASM_WEBSOCKET - ASM_WIZ_ACCOUNT - ASM_WP_JSON - AUTOMATED_PENTEST_GRAPHQL - AUTOMATED_PENTEST_REST - AUTOMATED_PENTEST_WEBAPP - BLST_GRAPHQL - BLST_REST - FRONTEND_DAST description: Filter by kind required: false description: Filter by kind name: kinds in: query - schema: type: array items: type: string enum: - CANCELED - FAILED - FINISHED - RUNNING - STARTING description: Filter by status required: false description: Filter by status name: status in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan problems: type: array items: type: object properties: code: type: string description: The problem code message: type: string description: The problem message severity: type: string description: The problem severity required: - code - message - severity description: The problems found in the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links - problems title: ScanSummarizedWithProblems description: Summarized scan information including validation problems required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /scans/emails: get: tags: - Emails - Beta summary: List inbox emails operationId: listInboxEmails description: Given a target email address, list inbox emails with cursor pagination. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: array items: type: string format: uuid description: Filter by email IDs example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: false description: Filter by email IDs name: ids in: query - schema: type: string format: date-time description: Filter by before date example: '2025-03-15T09:00:00Z' required: false description: Filter by before date name: before in: query - schema: type: string format: date-time description: Filter by after date example: '2025-03-15T09:00:00Z' required: false description: Filter by after date name: after in: query - schema: type: string format: email description: Inbox email address used as `to` filter example: demo.0100519e@scan.escape.tech required: true description: Inbox email address used as `to` filter name: email in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The email identifier createdAt: type: string format: date-time description: The date and time the email was created from: type: string description: The sender email address subject: type: string description: The email subject required: - id - createdAt - from - subject title: ScanEmailSummary description: Summarized information about an inbox email required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /scans/emails/{id}: get: tags: - Emails - Beta summary: Read inbox email content operationId: readInboxEmail description: Given an email id, fetch and return its full raw content. parameters: - schema: type: string format: uuid description: The inbox email ID example: 00000000-0000-0000-0000-000000000000 required: true description: The inbox email ID name: id in: path responses: '200': description: Inbox email details with body content: application/json: schema: type: object properties: id: type: string format: uuid description: The email identifier createdAt: type: string format: date-time description: The date and time the email was created from: type: string description: The sender email address subject: type: string description: The email subject body: type: string description: The email body required: - id - createdAt - from - subject - body title: ScanEmailDetails description: Detailed information about an inbox email including body '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /scans/{scanId}: get: tags: - Scans summary: Get a scan operationId: getScan description: Get a scan by ID parameters: - schema: type: string description: The scan ID example: 00000000-0000-0000-0000-000000000000 required: true description: The scan ID name: scanId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /scans/{scanId}/cancel: put: tags: - Scans summary: Cancel a scan operationId: cancelScan description: Cancel a scan by ID parameters: - schema: type: string description: The scan ID example: 00000000-0000-0000-0000-000000000000 required: true description: The scan ID name: scanId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /scans/{scanId}/ignore: put: tags: - Scans summary: Ignore a scan operationId: ignoreScan description: Ignore a scan by ID parameters: - schema: type: string description: The scan ID example: 00000000-0000-0000-0000-000000000000 required: true description: The scan ID name: scanId in: path requestBody: description: Body of the request to ignore a scan content: application/json: schema: type: object properties: ignored: type: boolean description: Whether to ignore the scan example: true required: - ignored responses: '200': description: OK content: application/json: schema: type: object properties: ignored: type: boolean required: - ignored '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist '409': description: Conflict content: application/json: schema: type: object properties: message: type: string enum: - Conflict on the following field field: type: string instanceId: type: string format: uuid required: - message - field - instanceId title: Conflict description: Returned when the request conflicts with an existing resource /scans/{scanId}/targets: get: tags: - Scans summary: List scan targets and API coverage operationId: listScanTargets description: Returns targets discovered during a scan, including REST and GraphQL operations with per-endpoint coverage. Filter by target type to focus on API routes and resolvers for CI/CD quality gates. parameters: - schema: type: string format: uuid description: The scan ID example: 00000000-0000-0000-0000-000000000000 required: true description: The scan ID name: scanId in: path - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - CREATED_AT - ISSUES_COUNT - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string enum: - API_ROUTE - CODE_FILE - GRAPHQL_RESOLVER - PORT - WEB_CRAWLED_URL - WEB_PAGE description: Optional filter by target kinds (comma-separated or repeated), e.g. API_ROUTE or GRAPHQL_RESOLVER required: false description: Optional filter by target kinds (comma-separated or repeated), e.g. API_ROUTE or GRAPHQL_RESOLVER name: types in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: createdAt: type: string description: The date and time the target was created apiRoute: type: - object - 'null' properties: blacklisted: type: boolean description: Whether the api route is blacklisted createdAt: type: string description: The date and time the api route was created displayName: type: string description: The display name of the api route id: type: string format: uuid description: The id of the api route name: type: string description: The name of the api route operation: type: string description: The operation of the api route parameters: type: - object - 'null' additionalProperties: type: string description: The parameters of the api route requestCount: type: number description: The request count of the api route meanDuration: type: - number - 'null' description: Mean HTTP duration for this route in milliseconds, when available coverage: type: - string - 'null' enum: - BROKEN_PIPE - NOT_FOUND - OK - RATE_LIMIT - REDIRECTION - REPEATER_ERROR - SERVER_ERROR - TIMEOUT - UNAUTHORIZED - UNKNOWN - VALIDATION_ERROR - null description: Coverage status for this REST endpoint (e.g. OK, UNAUTHORIZED, BLOCKLISTED) coverageByUser: type: - array - 'null' items: type: object properties: name: type: string description: User or session label associated with this target entry coverage: type: string enum: - BROKEN_PIPE - NOT_FOUND - OK - RATE_LIMIT - REDIRECTION - REPEATER_ERROR - SERVER_ERROR - TIMEOUT - UNAUTHORIZED - UNKNOWN - VALIDATION_ERROR description: Coverage status for that user/session required: - name - coverage title: CoverageByUserEntry description: Per-user or per-session coverage breakdown when available returnType: type: - string - 'null' description: The return type of the api route source: type: string enum: - SOURCE_INFERRED - SOURCE_SPECIFICATION description: The source of the api route required: - blacklisted - createdAt - displayName - id - name - operation - requestCount - coverage - source title: ApiRouteDetailed description: The api route of the target codeFile: type: - object - 'null' properties: id: type: string format: uuid description: The id of the code file language: type: string description: The language of the code file path: type: string description: The path of the code file required: - id - language - path title: CodeFileDetailed description: The code file of the target graphqlResolver: type: - object - 'null' properties: blacklisted: type: boolean description: Whether the graphql resolver is blacklisted createdAt: type: string description: The date and time the graphql resolver was created displayName: type: string description: The display name of the graphql resolver id: type: string format: uuid description: The id of the graphql resolver name: type: string description: The name of the graphql resolver parameters: type: - object - 'null' additionalProperties: type: string description: The parameters of the graphql resolver requestCount: type: number description: The request count for this resolver meanDuration: type: - number - 'null' description: Mean duration for this resolver in milliseconds, when available coverage: type: - string - 'null' enum: - BROKEN_PIPE - NOT_FOUND - OK - RATE_LIMIT - REDIRECTION - REPEATER_ERROR - SERVER_ERROR - TIMEOUT - UNAUTHORIZED - UNKNOWN - VALIDATION_ERROR - null description: Coverage status for this GraphQL field (e.g. OK, UNAUTHORIZED, BLOCKLISTED) coverageByUser: type: - array - 'null' items: type: object properties: name: type: string description: User or session label associated with this target entry coverage: type: string enum: - BROKEN_PIPE - NOT_FOUND - OK - RATE_LIMIT - REDIRECTION - REPEATER_ERROR - SERVER_ERROR - TIMEOUT - UNAUTHORIZED - UNKNOWN - VALIDATION_ERROR description: Coverage status for that user/session required: - name - coverage title: CoverageByUserEntry description: Per-user or per-session coverage breakdown when available parent: type: string description: GraphQL parent type (query, mutation, or subscription) returnType: type: - string - 'null' description: The return type of the graphql resolver source: type: string enum: - SOURCE_INFERRED - SOURCE_SPECIFICATION description: The source of the resolver (specification vs inferred) required: - blacklisted - createdAt - displayName - id - name - requestCount - coverage - parent - source title: GraphqlResolverDetailed description: The graphql resolver of the target id: type: string format: uuid description: The id of the target port: type: - object - 'null' properties: id: type: string format: uuid description: The id of the port port: type: number description: The port of the port protocol: type: string description: The protocol of the port required: - id - port - protocol title: PortDetailed description: The port of the target required: - createdAt - id title: TargetDetailed description: Detailed information about a target required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /issues: get: tags: - Issues summary: List issues operationId: listIssues description: List and search issues of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - ASSET - LAST_SEEN - SEVERITY description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by application IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by application IDs name: profileIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by asset IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by asset IDs name: assetIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by domain example: example.com,example.org required: false description: Filter by domain name: domains in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by specific issue IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by specific issue IDs name: ids in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by issue names example: issue1,issue2 required: false description: Filter by issue names name: names in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by scan IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by scan IDs name: scanIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by tag IDs required: false description: Filter by tag IDs name: tagIds in: query - schema: type: string description: Search term to filter issues by name or description example: issue1 required: false description: Search term to filter issues by name or description name: search in: query - schema: type: string enum: - 'true' - 'false' example: 'true' description: Filter by issues with Jira tickets required: false description: Filter by issues with Jira tickets name: jiraTicket in: query - schema: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: Filter by risk types required: false description: Filter by risk types name: risks in: query - schema: type: array items: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: Filter by asset classes required: false description: Filter by asset classes name: assetClasses in: query - schema: type: array items: type: string enum: - ASM_AKAMAI_ACCOUNT - ASM_AWS_ACCOUNT - ASM_AWS_LAMBDA - ASM_AZURE_TENANT - ASM_BITBUCKET_ORGANIZATION - ASM_BITBUCKET_REPOSITORY - ASM_BURPSUITE_EXPORT - ASM_CLOUDFLARE_ACCOUNT - ASM_CODE_PROJECT - ASM_DNS - ASM_GCP_PROJECT - ASM_GITHUB_ORGANIZATION - ASM_GITHUB_REPOSITORY - ASM_GITLAB_GROUP - ASM_GITLAB_REPOSITORY - ASM_GRAPHQL - ASM_GRAPHQL_SCHEMA - ASM_GRPC - ASM_HAR_EXPORT - ASM_INSOMNIA - ASM_IPV4 - ASM_IPV4_RANGE - ASM_IPV6 - ASM_KUBERNETES_CLUSTER - ASM_MCP - ASM_OPENAPI - ASM_PACKAGE - ASM_POSTMAN_COLLECTION - ASM_POSTMAN_ENVIRONMENT - ASM_POSTMAN_ORGANIZATION - ASM_REST - ASM_SOAP - ASM_SOFTWARE - ASM_WEBAPP - ASM_WEBSOCKET - ASM_WIZ_ACCOUNT - ASM_WP_JSON - AUTOMATED_PENTEST_GRAPHQL - AUTOMATED_PENTEST_REST - AUTOMATED_PENTEST_WEBAPP - BLST_GRAPHQL - BLST_REST - FRONTEND_DAST description: Filter by scanner kinds required: false description: Filter by scanner kinds name: scannerKinds in: query - schema: type: array items: type: string enum: - CRITICAL - HIGH - INFO - LOW - MEDIUM description: Filter by issue severities required: false description: Filter by issue severities name: severities in: query - schema: type: array items: type: string enum: - FALSE_POSITIVE - IGNORED - MANUAL_REVIEW - OPEN - RESOLVED description: Filter by issue status required: false description: Filter by issue status name: status in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the issue name: type: string description: The name of the issue fullName: type: string description: The full name of the issue category: type: string enum: - ACCESS_CONTROL - CONFIGURATION - CUSTOM - INFORMATION_DISCLOSURE - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SCHEMA - SENSITIVE_DATA description: The category of the issue severity: type: string enum: - CRITICAL - HIGH - INFO - LOW - MEDIUM description: The severity level of the issue status: type: string enum: - FALSE_POSITIVE - IGNORED - MANUAL_REVIEW - OPEN - RESOLVED description: The current status of the issue context: type: string description: The context of the issue risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: Array of risk types associated with the issue alertUid: type: string description: Unique identifier for the alert createdAt: type: string description: When the issue was first created asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset owners: type: array items: type: string format: email description: Email addresses of the owners of this asset. service: type: - object - 'null' properties: url: type: string description: The url of the asset service type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET description: The type of the asset service required: - url - type title: AssetServiceSummarized description: The service of the asset frontend: type: - object - 'null' properties: url: type: string description: The url of the asset frontend type: type: string enum: - WEBAPP description: The type of the asset frontend required: - url - type title: AssetFrontendSummarized description: The frontend of the asset host: type: - object - 'null' properties: address: type: string description: The address of the asset host type: type: string enum: - DNS - IPV4 - IPV6 description: The type of the asset host required: - address - type title: AssetHostSummarized description: The host of the asset links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - service - frontend - host - links title: AssetSummarized description: The asset of the issue lastSeenScanId: type: - string - 'null' description: ID of the last scan where this issue was seen lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last scan in which this issue was observed firstSeenScanId: type: - string - 'null' description: ID of the first scan where this issue was seen customRuleId: type: - string - 'null' description: ID of the custom rule if this is a custom issue links: type: object properties: issueOverview: type: string description: URL to view the issue overview in the platform required: - issueOverview required: - id - name - fullName - category - severity - status - context - risks - alertUid - createdAt - asset - lastSeenScanId - lastSeenScan - firstSeenScanId - customRuleId - links title: IssueSummarized description: Summarized information about an issue required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied /issues/funnel: get: tags: - Issues summary: Get issue funnel operationId: getIssueFunnel description: 'Get issue funnel data showing how issues distribute across severity/exposure steps: ALL → OPEN_ISSUES → EXPOSED → UNAUTHENTICATED → HIGH_BUSINESS_IMPACT → CRITICAL.' parameters: - schema: anyOf: - type: string - type: array items: type: string description: Filter by project IDs example: 00000000-0000-0000-0000-000000000000 required: false description: Filter by project IDs name: projectIds in: query responses: '200': description: OK content: application/json: schema: type: array items: type: object properties: category: type: string description: Issue category step: type: string description: Funnel step name count: type: number description: Number of issues at this step required: - category - step - count title: IssueFunnel description: Issue funnel breakdown by category and step /issues/trends: get: tags: - Issues summary: Get issue severity trends operationId: getIssueTrends description: Get time-bucketed issue counts by severity. Useful for tracking security posture over time. parameters: - schema: type: string description: Start date (ISO 8601) example: '2026-01-01T00:00:00Z' required: true description: Start date (ISO 8601) name: after in: query - schema: type: string description: End date (ISO 8601) example: '2026-04-01T00:00:00Z' required: true description: End date (ISO 8601) name: before in: query - schema: type: string default: 1 day description: Time bucket interval (e.g. "1 day", "1 week") example: 1 day required: false description: Time bucket interval (e.g. "1 day", "1 week") name: interval in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by application IDs required: false description: Filter by application IDs name: applicationIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query responses: '200': description: OK content: application/json: schema: type: array items: type: object properties: date: type: string description: Time bucket start date HIGH: type: number description: Number of HIGH severity issues MEDIUM: type: number description: Number of MEDIUM severity issues LOW: type: number description: Number of LOW severity issues INFO: type: number description: Number of INFO severity issues required: - date - HIGH - MEDIUM - LOW - INFO title: IssueTrends description: Time-series of issue counts by severity /issues/bulk-update: post: tags: - Issues summary: Bulk update issues operationId: bulkUpdateIssues description: Update the status of multiple issues matching a filter predicate. For example, mark all LOW severity issues on a given asset as IGNORED. requestBody: content: application/json: schema: type: object properties: status: type: string enum: - FALSE_POSITIVE - IGNORED - MANUAL_REVIEW - OPEN - RESOLVED description: The new status to apply where: type: object properties: ids: type: array items: type: string description: Filter by specific issue IDs assetIds: type: array items: type: string description: Filter by asset IDs severities: type: array items: type: string enum: - CRITICAL - HIGH - INFO - LOW - MEDIUM description: Filter by severities profileIds: type: array items: type: string description: Filter by profile IDs tagIds: type: array items: type: string description: Filter by tag IDs scannerKinds: type: array items: type: string enum: - ASM_AKAMAI_ACCOUNT - ASM_AWS_ACCOUNT - ASM_AWS_LAMBDA - ASM_AZURE_TENANT - ASM_BITBUCKET_ORGANIZATION - ASM_BITBUCKET_REPOSITORY - ASM_BURPSUITE_EXPORT - ASM_CLOUDFLARE_ACCOUNT - ASM_CODE_PROJECT - ASM_DNS - ASM_GCP_PROJECT - ASM_GITHUB_ORGANIZATION - ASM_GITHUB_REPOSITORY - ASM_GITLAB_GROUP - ASM_GITLAB_REPOSITORY - ASM_GRAPHQL - ASM_GRAPHQL_SCHEMA - ASM_GRPC - ASM_HAR_EXPORT - ASM_INSOMNIA - ASM_IPV4 - ASM_IPV4_RANGE - ASM_IPV6 - ASM_KUBERNETES_CLUSTER - ASM_MCP - ASM_OPENAPI - ASM_PACKAGE - ASM_POSTMAN_COLLECTION - ASM_POSTMAN_ENVIRONMENT - ASM_POSTMAN_ORGANIZATION - ASM_REST - ASM_SOAP - ASM_SOFTWARE - ASM_WEBAPP - ASM_WEBSOCKET - ASM_WIZ_ACCOUNT - ASM_WP_JSON - AUTOMATED_PENTEST_GRAPHQL - AUTOMATED_PENTEST_REST - AUTOMATED_PENTEST_WEBAPP - BLST_GRAPHQL - BLST_REST - FRONTEND_DAST description: Filter by scanner kinds description: Filter predicate; omit to match all issues required: - status responses: '200': description: OK content: application/json: schema: type: object properties: ids: type: array items: type: string description: IDs of the updated issues required: - ids '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /issues/{issueId}: get: tags: - Issues summary: Get an issue operationId: getIssue description: Get an issue by ID parameters: - schema: type: string description: The issue ID example: 00000000-0000-0000-0000-000000000000 required: true description: The issue ID name: issueId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the issue name: type: string description: The name of the issue fullName: type: string description: The full name of the issue category: type: string enum: - ACCESS_CONTROL - CONFIGURATION - CUSTOM - INFORMATION_DISCLOSURE - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SCHEMA - SENSITIVE_DATA description: The category of the issue severity: type: string enum: - CRITICAL - HIGH - INFO - LOW - MEDIUM description: The severity level of the issue status: type: string enum: - FALSE_POSITIVE - IGNORED - MANUAL_REVIEW - OPEN - RESOLVED description: The current status of the issue context: type: - string - 'null' description: AI-generated contextual overview for the issue risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: Array of risk types associated with the issue alertUid: type: string description: Unique identifier for the alert createdAt: type: string description: When the issue was first created asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the issue lastSeenScanId: type: - string - 'null' description: ID of the last scan where this issue was seen lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last scan in which this issue was observed firstSeenScanId: type: - string - 'null' description: ID of the first scan where this issue was seen customRuleId: type: - string - 'null' description: ID of the custom rule if this is a custom issue aiRemediationFramework: type: string description: Framework used for AI remediation remediation: type: - string - 'null' description: AI-generated remediation for the issue cvss: type: - object - 'null' properties: score: type: - number - 'null' description: CVSS score of the issue vector: type: - string - 'null' description: CVSS vector of the issue required: - score - vector description: CVSS information for the issue compliances: type: array items: type: object properties: framework: type: string description: The compliance framework name item: type: string description: The compliance item identifier required: - framework - item description: Compliances associated with the issue links: type: object properties: issueOverview: type: string description: URL to view the issue overview in the platform required: - issueOverview latestEventIds: type: array items: type: string maxItems: 5 description: IDs of up to 5 events from the issue's last-seen scan, newest-first. Hydrate with GET /v3/events/:id for full payload (Exchange, etc.). Only populated by GET /v3/issues/:issueId. IDs are opaque strings (GraphQL `ID` scalars), not guaranteed UUIDs. latestEventsTruncated: type: boolean description: True when the last-seen scan has more than 5 events. Use GET /v3/events?issueIds=&scanIds= for the full list. required: - id - name - fullName - category - severity - status - context - risks - alertUid - createdAt - asset - lastSeenScanId - lastSeenScan - firstSeenScanId - customRuleId - aiRemediationFramework - remediation - cvss - links '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist put: tags: - Issues summary: Update an issue operationId: updateIssue description: Update an issue by ID parameters: - schema: type: string description: The issue ID example: 00000000-0000-0000-0000-000000000000 required: true description: The issue ID name: issueId in: path requestBody: description: Body of the request to update an issue content: application/json: schema: type: object properties: status: type: string enum: - FALSE_POSITIVE - IGNORED - MANUAL_REVIEW - OPEN - RESOLVED description: The issue status responses: '200': description: OK content: application/json: schema: type: object properties: ids: type: array items: type: string description: The IDs of the updated issues required: - ids '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /issues/{issueId}/activities: get: tags: - Issues summary: List activities of an issue operationId: listIssueActivities description: List activities related to a specific issue. parameters: - schema: type: string format: uuid description: The issue ID example: 00000000-0000-0000-0000-000000000000 required: true description: The issue ID name: issueId in: path responses: '200': description: OK content: application/json: schema: type: array items: type: object properties: author: type: - object - 'null' properties: id: type: string description: The id of the author email: type: string description: The email of the author required: - id - email title: AuthorSummarized description: Summarized information about an author id: type: string format: uuid description: The id of the activity createdAt: type: string description: The date and time the activity was created kind: type: string enum: - ASSET_FOUND - ASSET_IGNORED - ASSET_UPDATED - COMMENT - ISSUE_FOUND - ISSUE_STATUS_CHANGED - OWNERS_NOTIFIED - SCHEMA_LINKED - SCHEMA_UNLINKED required: - author - id - createdAt - kind title: ActivitySummarized description: Summarized information about an activity '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist post: tags: - Issues summary: Comment on an issue operationId: createIssueComment description: Add a comment to an issue. parameters: - schema: type: string format: uuid description: The issue ID example: 00000000-0000-0000-0000-000000000000 required: true description: The issue ID name: issueId in: path requestBody: description: Body of the request to add a comment content: application/json: schema: type: object properties: comment: type: string minLength: 1 maxLength: 512 description: Comment text; maximum 512 characters required: - comment responses: '200': description: OK content: application/json: schema: type: object properties: author: type: - object - 'null' properties: id: type: string description: The id of the author email: type: string description: The email of the author required: - id - email title: AuthorSummarized description: Summarized information about an author id: type: string format: uuid description: The id of the activity createdAt: type: string description: The date and time the activity was created kind: type: string enum: - ASSET_FOUND - ASSET_IGNORED - ASSET_UPDATED - COMMENT - ISSUE_FOUND - ISSUE_STATUS_CHANGED - OWNERS_NOTIFIED - SCHEMA_LINKED - SCHEMA_UNLINKED required: - author - id - createdAt - kind '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /issues/{issueId}/notify: post: tags: - Issues summary: Notify issue owners operationId: notifyIssueOwners description: Send an email notification to the owners of the asset associated with this issue. parameters: - schema: type: string format: uuid description: The issue ID example: 00000000-0000-0000-0000-000000000000 required: true description: The issue ID name: issueId in: path requestBody: content: application/json: schema: type: object properties: scanId: type: string format: uuid description: The scan ID to reference in the notification example: 00000000-0000-0000-0000-000000000000 required: - scanId responses: '200': description: OK content: application/json: schema: type: object properties: notified: type: boolean description: Whether owners were found and notified required: - notified '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /jobs: post: tags: - Jobs - Beta summary: Trigger a template export job operationId: triggerExport description: 'Schedules the same export job as the product UI (SAAS_EXPORT_TEMPLATE): PDF/report blocks, optional scan and issue scope. Use GET /jobs/{jobId} to read status and artefact download URLs when completed.' requestBody: content: application/json: schema: type: object properties: blocks: type: array items: type: object properties: kind: type: string enum: - AI_ANALYSIS - ASSETS_SUMMARY - COMPLIANCE_COVERAGE - COMPLIANCE_CRA - COMPLIANCE_CWE - COMPLIANCE_DORA - COMPLIANCE_FEDRAMP - COMPLIANCE_GDPR - COMPLIANCE_HIPAA - COMPLIANCE_HITRUST_CSF - COMPLIANCE_IEC62443 - COMPLIANCE_ISO27001 - COMPLIANCE_MITRE_ATTACK - COMPLIANCE_NIS2 - COMPLIANCE_NIST - COMPLIANCE_OWASP - COMPLIANCE_OWASP_ASVS - COMPLIANCE_OWASP_LLM - COMPLIANCE_PCI_DSS - COMPLIANCE_PSD2 - COMPLIANCE_SOC2 - COMPLIANCE_WASC - ISSUE_DETAIL - ISSUE_LIST - ISSUE_SUMMARY - SCAN_HISTORY_TREND - SCAN_SUMMARY params: description: Block-specific JSON parameters (optional). required: - kind minItems: 1 description: Report blocks to include, in order. scanId: type: string format: uuid description: Restrict scope to a scan (optional). dry: type: boolean description: If true, validates selection only and does not schedule a job. assetWhere: description: GraphQL AssetWhereInput JSON (optional); narrows assets like the internal API. profileWhere: description: GraphQL ProfilesWhereInput JSON (optional). issueWhere: description: GraphQL IssueWhereInput JSON (optional); defaults if omitted when using scan/profile scope. required: - blocks responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: ID of the scheduled export job (template generation). required: - id '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /jobs/{jobId}: get: tags: - Jobs - Beta summary: Get a job operationId: getJob description: Returns job status, parameters, and artefacts (including signedUrl download links for completed export outputs). parameters: - schema: type: string format: uuid description: The job ID example: 00000000-0000-0000-0000-000000000000 required: true description: The job ID name: jobId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid status: type: string enum: - COMPLETED - FAILED - PENDING - RUNNING kind: type: string enum: - INTEGRATION_WIZ_RESEND_ISSUES - MAINTENANCE_MIGRATE_PROFILE - MAINTENANCE_RECOMPUTE_ISSUES_FULLNAME - SAAS_AI_FALSE_POSITIVE_DETECTION - SAAS_AI_FALSE_POSITIVE_DETECTION_ON_ISSUE - SAAS_ARCHIVE_SCAN - SAAS_ARTEFACTS_S3_MIGRATION - SAAS_ASSET_FILES_S3_MIGRATION - SAAS_ASSET_SCHEMA_S3_MIGRATION - SAAS_ATTACHMENTS_S3_MIGRATION - SAAS_BATCHED_SCHEDULE_ASM_SCANS - SAAS_BATCHED_UPDATE_CACHED_DATA - SAAS_BATCHED_UPDATE_ISSUE_COUNTS - SAAS_BULK_CREATE_ASSETS - SAAS_CANCEL_RUNNING_SCANS - SAAS_CHECK_LOCATION_DOWN - SAAS_DELETE_APPLICATION - SAAS_DELETE_ASSETS - SAAS_DELETE_INTEGRATION - SAAS_DELETE_ORGANIZATION - SAAS_DELETE_PROJECT - SAAS_END_SCAN_ROUTINE - SAAS_EVENTS_ARCHIVE_GENERATION - SAAS_EXCHANGES_ARCHIVE_GENERATION - SAAS_EXECUTE_WORKFLOW - SAAS_EXPORT_TEMPLATE - SAAS_GENERATE_ISSUE_REMEDIATION - SAAS_MIGRATE_WORKFLOWS_FILTERS - SAAS_POPULATE_ISSUE_SCAN_MTM - SAAS_PROCESS_AGENTIC_LOGS - SAAS_PROCESS_FILE_UPLOAD - SAAS_REBUILD_ASSET_LINKS - SAAS_RECOMPUTE_ASSET_RISKS - SAAS_SCHEDULE_DEFAULT_VIEWS_SEED - SAAS_SCHEDULE_ISSUE_SCAN_MTM_POPULATION - SAAS_SCHEDULE_WORKFLOWS - SAAS_SCHEDULE_WORKFLOWS_FILTERS_MIGRATION - SAAS_SEED_DEFAULT_VIEWS - SAAS_START_ASM_SCAN - SAAS_TEMPORARY_SYNC_SCHEMAS_AND_SERVICES - SAAS_UPSERT_ASM_PROFILES - SEND_JOB_ARTEFACTS_BY_EMAIL - TEST_KIND createdAt: type: string scheduledAt: type: - string - 'null' triggeredAt: type: - string - 'null' completedAt: type: - string - 'null' parameters: {} artefacts: type: array items: type: object properties: id: type: string format: uuid kind: type: string enum: - AUDITOR_REPORT - EVENTS_ARCHIVE - EXCHANGES_ARCHIVE - EXECUTIVE_REPORT - EXPORT_JOB_RESULT name: type: string signedUrl: type: string createdAt: type: string updatedAt: type: string required: - id - kind - name - signedUrl - createdAt - updatedAt title: JobArtefact description: An artefact produced by a job; signedUrl is a time-limited download link. required: - id - status - kind - createdAt - scheduledAt - triggeredAt - completedAt - artefacts '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /events: get: tags: - Events summary: List events operationId: listEvents description: List and search events of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - DATE description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: string description: Search term to filter events by name or description example: event1 required: false description: Search term to filter events by name or description name: search in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by scan IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by scan IDs name: scanIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by asset IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by asset IDs name: assetIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by issue IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by issue IDs name: issueIds in: query - schema: type: array items: type: string enum: - DEBUG - ERROR - INFO - WARNING description: Filter by level required: false description: Filter by level name: levels in: query - schema: type: array items: type: string enum: - AGENT_ACTION - AGENT_REASONING - CONFIGURATION - EXECUTION description: Filter by stage required: false description: Filter by stage name: stages in: query - schema: type: string enum: - 'true' - 'false' example: 'true' description: Filter by attachments required: false description: Filter by attachments name: hasAttachments in: query - schema: type: array items: type: string enum: - ANY - EXCHANGE - GRAPH - OPENAPI_SPEC - SCREENSHOT - SNIPPET description: Filter by attachments required: false description: Filter by attachments name: attachments in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the event createdAt: type: string description: The date and time the event was created title: type: string description: The title of the event level: type: string enum: - DEBUG - ERROR - INFO - WARNING description: The level of the event stage: type: string enum: - AGENT_ACTION - AGENT_REASONING - CONFIGURATION - EXECUTION description: The stage of the event attachments: type: array items: type: object properties: id: type: string format: uuid description: The id of the attachment createdAt: type: string description: The date and time the attachment was created target: type: - object - 'null' properties: id: type: string format: uuid description: The id of the target createdAt: type: string description: The date and time the target was created apiRoute: type: - object - 'null' properties: id: type: string format: uuid description: The id of the api route createdAt: type: string description: The date and time the api route was created name: type: string description: The name of the api route displayName: type: string description: The display name of the api route required: - id - createdAt - name - displayName description: The api route of the target codeFile: type: - object - 'null' properties: id: type: string format: uuid description: The id of the code file language: type: string description: The language of the code file path: type: string description: The path of the code file required: - id - language - path description: The code file of the target graphqlResolver: type: - object - 'null' properties: id: type: string format: uuid description: The id of the graphql resolver displayName: type: string description: The display name of the graphql resolver name: type: string description: The name of the graphql resolver required: - id - displayName - name description: The graphql resolver of the target port: type: - object - 'null' properties: id: type: string format: uuid description: The id of the port port: type: number description: The port number protocol: type: string description: The protocol required: - id - port - protocol description: The port of the target required: - id - createdAt - apiRoute - codeFile - graphqlResolver - port description: The target of the attachment required: - id - createdAt - target description: The attachments of the event required: - id - createdAt - title - level - stage title: EventSummarized description: Summarized information about an event required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied /events/{eventId}: get: tags: - Events summary: Get an event operationId: getEvent description: Get an event by ID (including attachments) parameters: - schema: type: string description: The event ID example: 00000000-0000-0000-0000-000000000000 required: true description: The event ID name: eventId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the event createdAt: type: string description: The date and time the event was created description: type: string description: The description of the event attachments: type: array items: type: object properties: id: type: string format: uuid description: The id of the attachment createdAt: type: string description: The date and time the attachment was created exchange: type: - object - 'null' properties: createdAt: type: string description: The date and time the exchange was created curl: type: string description: The curl of the exchange duration: type: number description: The duration of the exchange id: type: string format: uuid description: The id of the exchange inferredScalars: type: array items: type: object properties: confidence: type: number description: The confidence of the inferred scalar kind: type: string description: The kind of the inferred scalar name: type: string description: The name of the inferred scalar required: - confidence - kind - name title: InferredScalarDetailed description: Detailed information about an inferred scalar description: The inferred scalars of the exchange responseBody: type: string description: The response body of the exchange responseHeaders: type: array items: type: object properties: name: type: string description: The name of the http header values: type: array items: type: string description: The values of the http header required: - name - values title: HttpHeaderDetailed description: Detailed information about a http header description: The response headers of the exchange responseStatusCode: type: number description: The response status code of the exchange url: type: string description: The url of the exchange required: - createdAt - curl - duration - id - inferredScalars - responseBody - responseHeaders - responseStatusCode - url title: ExchangeDetailed description: The exchange of the attachment generatedOpenapiSpec: type: - object - 'null' properties: id: type: string format: uuid description: The id of the generated openapi spec createdAt: type: string description: The date and time the generated openapi spec was created temporarySignedUrl: type: string description: The temporary signed url of the generated openapi spec required: - id - createdAt - temporarySignedUrl title: GeneratedOpenapiSpecDetailed description: The generated openapi spec of the attachment graph: type: - object - 'null' properties: id: type: string format: uuid description: The id of the graph createdAt: type: string description: The date and time the graph was created temporarySignedUrl: type: string description: The temporary signed url of the graph required: - id - createdAt - temporarySignedUrl title: GraphDetailed description: The graph of the attachment screenshot: type: - object - 'null' properties: alt: type: - string - 'null' description: The alt of the screenshot createdAt: type: string description: The date and time the screenshot was created id: type: string format: uuid description: The id of the screenshot temporarySignedUrl: type: string description: The temporary signed url of the screenshot required: - alt - createdAt - id - temporarySignedUrl title: ScreenshotDetailed description: The screenshot of the attachment snippet: type: - object - 'null' properties: createdAt: type: string description: The date and time the snippet was created id: type: string format: uuid description: The id of the snippet language: type: string description: The language of the snippet name: type: string description: The name of the snippet snippet: type: string description: The snippet of the snippet url: type: - string - 'null' description: The url of the snippet required: - createdAt - id - language - name - snippet - url title: SnippetDetailed description: The snippet of the attachment target: type: - object - 'null' properties: createdAt: type: string description: The date and time the target was created apiRoute: type: - object - 'null' properties: blacklisted: type: boolean description: Whether the api route is blacklisted createdAt: type: string description: The date and time the api route was created displayName: type: string description: The display name of the api route id: type: string format: uuid description: The id of the api route name: type: string description: The name of the api route operation: type: string description: The operation of the api route parameters: type: - object - 'null' additionalProperties: type: string description: The parameters of the api route requestCount: type: number description: The request count of the api route meanDuration: type: - number - 'null' description: Mean HTTP duration for this route in milliseconds, when available coverage: type: - string - 'null' enum: - BROKEN_PIPE - NOT_FOUND - OK - RATE_LIMIT - REDIRECTION - REPEATER_ERROR - SERVER_ERROR - TIMEOUT - UNAUTHORIZED - UNKNOWN - VALIDATION_ERROR - null description: Coverage status for this REST endpoint (e.g. OK, UNAUTHORIZED, BLOCKLISTED) coverageByUser: type: - array - 'null' items: type: object properties: name: type: string description: User or session label associated with this target entry coverage: type: string enum: - BROKEN_PIPE - NOT_FOUND - OK - RATE_LIMIT - REDIRECTION - REPEATER_ERROR - SERVER_ERROR - TIMEOUT - UNAUTHORIZED - UNKNOWN - VALIDATION_ERROR description: Coverage status for that user/session required: - name - coverage title: CoverageByUserEntry description: Per-user or per-session coverage breakdown when available returnType: type: - string - 'null' description: The return type of the api route source: type: string enum: - SOURCE_INFERRED - SOURCE_SPECIFICATION description: The source of the api route required: - blacklisted - createdAt - displayName - id - name - operation - requestCount - coverage - source title: ApiRouteDetailed description: The api route of the target codeFile: type: - object - 'null' properties: id: type: string format: uuid description: The id of the code file language: type: string description: The language of the code file path: type: string description: The path of the code file required: - id - language - path title: CodeFileDetailed description: The code file of the target graphqlResolver: type: - object - 'null' properties: blacklisted: type: boolean description: Whether the graphql resolver is blacklisted createdAt: type: string description: The date and time the graphql resolver was created displayName: type: string description: The display name of the graphql resolver id: type: string format: uuid description: The id of the graphql resolver name: type: string description: The name of the graphql resolver parameters: type: - object - 'null' additionalProperties: type: string description: The parameters of the graphql resolver requestCount: type: number description: The request count for this resolver meanDuration: type: - number - 'null' description: Mean duration for this resolver in milliseconds, when available coverage: type: - string - 'null' enum: - BROKEN_PIPE - NOT_FOUND - OK - RATE_LIMIT - REDIRECTION - REPEATER_ERROR - SERVER_ERROR - TIMEOUT - UNAUTHORIZED - UNKNOWN - VALIDATION_ERROR - null description: Coverage status for this GraphQL field (e.g. OK, UNAUTHORIZED, BLOCKLISTED) coverageByUser: type: - array - 'null' items: type: object properties: name: type: string description: User or session label associated with this target entry coverage: type: string enum: - BROKEN_PIPE - NOT_FOUND - OK - RATE_LIMIT - REDIRECTION - REPEATER_ERROR - SERVER_ERROR - TIMEOUT - UNAUTHORIZED - UNKNOWN - VALIDATION_ERROR description: Coverage status for that user/session required: - name - coverage title: CoverageByUserEntry description: Per-user or per-session coverage breakdown when available parent: type: string description: GraphQL parent type (query, mutation, or subscription) returnType: type: - string - 'null' description: The return type of the graphql resolver source: type: string enum: - SOURCE_INFERRED - SOURCE_SPECIFICATION description: The source of the resolver (specification vs inferred) required: - blacklisted - createdAt - displayName - id - name - requestCount - coverage - parent - source title: GraphqlResolverDetailed description: The graphql resolver of the target id: type: string format: uuid description: The id of the target port: type: - object - 'null' properties: id: type: string format: uuid description: The id of the port port: type: number description: The port of the port protocol: type: string description: The protocol of the port required: - id - port - protocol title: PortDetailed description: The port of the target required: - createdAt - id title: TargetDetailed description: The target of the attachment required: - id - createdAt title: AttachmentDetailed description: Detailed information about an attachment description: The attachments of the event issues: type: array items: type: object properties: id: type: string format: uuid description: The id of the issue name: type: string description: The name of the issue fullName: type: string description: The full name of the issue category: type: string enum: - ACCESS_CONTROL - CONFIGURATION - CUSTOM - INFORMATION_DISCLOSURE - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SCHEMA - SENSITIVE_DATA description: The category of the issue severity: type: string enum: - CRITICAL - HIGH - INFO - LOW - MEDIUM description: The severity level of the issue status: type: string enum: - FALSE_POSITIVE - IGNORED - MANUAL_REVIEW - OPEN - RESOLVED description: The current status of the issue context: type: string description: The context of the issue risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: Array of risk types associated with the issue alertUid: type: string description: Unique identifier for the alert createdAt: type: string description: When the issue was first created asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset owners: type: array items: type: string format: email description: Email addresses of the owners of this asset. service: type: - object - 'null' properties: url: type: string description: The url of the asset service type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET description: The type of the asset service required: - url - type title: AssetServiceSummarized description: The service of the asset frontend: type: - object - 'null' properties: url: type: string description: The url of the asset frontend type: type: string enum: - WEBAPP description: The type of the asset frontend required: - url - type title: AssetFrontendSummarized description: The frontend of the asset host: type: - object - 'null' properties: address: type: string description: The address of the asset host type: type: string enum: - DNS - IPV4 - IPV6 description: The type of the asset host required: - address - type title: AssetHostSummarized description: The host of the asset links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - service - frontend - host - links title: AssetSummarized description: The asset of the issue lastSeenScanId: type: - string - 'null' description: ID of the last scan where this issue was seen lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last scan in which this issue was observed firstSeenScanId: type: - string - 'null' description: ID of the first scan where this issue was seen customRuleId: type: - string - 'null' description: ID of the custom rule if this is a custom issue links: type: object properties: issueOverview: type: string description: URL to view the issue overview in the platform required: - issueOverview required: - id - name - fullName - category - severity - status - context - risks - alertUid - createdAt - asset - lastSeenScanId - lastSeenScan - firstSeenScanId - customRuleId - links title: IssueSummarized description: Summarized information about an issue description: The issues of the event (summarized). Hydrate with GET /v3/issues/:issueId for full payload (remediation, CVSS, compliances, full asset details). issuesCount: type: number description: The number of issues of the event level: type: string enum: - DEBUG - ERROR - INFO - WARNING description: The level of the event scan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The scan of the event scanId: type: - string - 'null' description: The id of the scan of the event stage: type: string enum: - AGENT_ACTION - AGENT_REASONING - CONFIGURATION - EXECUTION description: The stage of the event title: type: string description: The title of the event required: - id - createdAt - description - issuesCount - level - scan - scanId - stage - title '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /audit/logs: get: tags: - Audit summary: List audit logs operationId: listAuditLogs description: List audit logs of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - ACTION - ACTOR - DATE - TARGET - TITLE description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: string description: An ISO 8601 timestamp to filter audit logs after example: '2025-01-01T00:00:00Z' required: false description: An ISO 8601 timestamp to filter audit logs after name: startTime in: query - schema: type: string description: An ISO 8601 timestamp to filter audit logs before example: '2025-01-01T00:00:00Z' required: false description: An ISO 8601 timestamp to filter audit logs before name: endTime in: query - schema: type: string description: Filter by action type example: user.confirmed required: false description: Filter by action type name: action in: query - schema: type: string description: Filter by actor example: 00000000-0000-0000-0000-000000000000 required: false description: Filter by actor name: actor in: query - schema: type: string description: Filter by search term example: Scan Started required: false description: Filter by search term name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the audit log date: type: string description: The date of the audit log title: type: string description: The title of the audit log action: type: string description: The action of the audit log actor: type: - string - 'null' description: The actor of the audit log actorEmail: type: - string - 'null' description: The email of the actor required: - id - date - title - action - actor - actorEmail title: AuditLogSummarized description: Summarized information about an audit log required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied /locations: get: tags: - Locations summary: List locations operationId: listLocations description: List and search locations of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - LAST_SEEN - NAME - TYPE description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: string example: location1 required: false name: search in: query - schema: type: string enum: - 'true' - 'false' example: 'true' required: false name: enabled in: query - schema: type: array items: type: string enum: - ESCAPE - PRIVATE required: false name: type in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The location ID. name: type: string description: The name of the location. type: type: string description: The type of the location. enabled: type: boolean description: Whether the location is enabled. lastSeenAt: type: - string - 'null' description: The date and time the location agent last connected. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - id - name - type - enabled - links title: LocationSummarized description: Summarized information about a location required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Locations summary: Create a location operationId: createLocation description: Create a Private Location. x-scalar-ignore: true requestBody: content: application/json: schema: type: object properties: name: type: string description: The name of the location. example: location1 sshPublicKey: type: string description: The SSH public key of the location. example: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl required: - name - sshPublicKey responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '409': description: Conflict content: application/json: schema: type: object properties: message: type: string enum: - Conflict on the following field field: type: string instanceId: type: string format: uuid required: - message - field - instanceId title: Conflict description: Returned when the request conflicts with an existing resource /locations/{locationId}: get: tags: - Locations summary: Get a location operationId: getLocation description: Retrieve a Private Location details. parameters: - schema: type: string format: uuid description: The ID of the location to get example: 00000000-0000-0000-0000-000000000000 required: true description: The ID of the location to get name: locationId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist put: tags: - Locations summary: Update a location operationId: updateLocation description: Update a Private Location details. parameters: - schema: type: string format: uuid description: The ID of the location to update example: 00000000-0000-0000-0000-000000000000 required: true description: The ID of the location to update name: locationId in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The name of the location. example: location1 enabled: type: boolean description: Whether the location is enabled. example: true sshPublicKey: type: string description: The SSH public key of the location. example: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist '409': description: Conflict content: application/json: schema: type: object properties: message: type: string enum: - Conflict on the following field field: type: string instanceId: type: string format: uuid required: - message - field - instanceId title: Conflict description: Returned when the request conflicts with an existing resource delete: tags: - Locations summary: Delete a location operationId: deleteLocation description: Delete a Private Location. parameters: - schema: type: string format: uuid description: The ID of the location to delete example: 00000000-0000-0000-0000-000000000000 required: true description: The ID of the location to delete name: locationId in: path responses: '200': description: OK content: application/json: schema: type: object properties: message: type: string enum: - Location deleted successfully required: - message '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /tags: get: tags: - Tags summary: List tags operationId: listTags description: List and search tags of the organization. responses: '200': description: OK content: application/json: schema: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: TagDetail description: Detailed information about a tag '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Tags summary: Create a tag operationId: createTag description: Create a tag for the organization. requestBody: description: Body of the request to create a tag content: application/json: schema: type: object properties: name: type: string maxLength: 40 description: The name of the tag example: tag1 color: type: string description: The color of the tag (hexadecimal color code) example: '000000' required: - name - color responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /tags/{tagId}: get: tags: - Tags summary: Get a tag operationId: getTag description: Get a tag by ID. parameters: - schema: type: string format: uuid description: The tag ID example: 00000000-0000-0000-0000-000000000000 required: true description: The tag ID name: tagId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request delete: tags: - Tags summary: Delete a tag operationId: deleteTag description: Delete a tag from the organization. parameters: - schema: type: string format: uuid description: The tag ID example: 00000000-0000-0000-0000-000000000000 required: true description: The tag ID name: tagId in: path responses: '200': description: OK content: application/json: schema: type: object properties: message: type: string required: - message '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist '409': description: Tag is bound and cannot be deleted content: application/json: schema: type: object properties: message: type: string required: - message '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /tags/{tagId}/{tagId}: put: tags: - Tags summary: Update a tag operationId: updateTag description: Update a tag name and/or color. parameters: - schema: type: string format: uuid description: The tag ID example: 00000000-0000-0000-0000-000000000000 required: true description: The tag ID name: tagId in: path requestBody: content: application/json: schema: type: object properties: name: type: string maxLength: 40 description: The new name of the tag example: production color: type: string pattern: ^[\da-f]{6}$/i description: 'The new color of the tag (hex without #)' example: e03d3d responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /upload/signed-url: post: tags: - Upload summary: Create signed URL operationId: createUploadSignedUrl description: "Retrieve a signed URL link to upload a file to the Escape Platform.\n\nBy running a query with this endpoint,\ \ you will receive a signed URL that you can use to upload a file to the Escape Platform.\n\n```json\n{\n \"url\"\ : \"[SIGNED URL]\",\n \"id\": \"[SIGNED URL ID]\"\n}\n```\n\nWith the url, you are able to upload one file:\n\n```bash\n\ curl -X PUT --data-binary '@./schema.json' \"[SIGNED URL]\"\n```\n\nNow, you are able to use the previously received\ \ id in another query.\nFor example to update a schema of your application.\n" responses: '200': description: OK content: application/json: schema: type: object properties: url: type: string maxLength: 1024 format: uri description: The signed URL to upload a file to the Escape Platform. id: type: string format: uuid description: The signed URL ID to upload a file to the Escape Platform. required: - url - id /me: get: tags: - Users summary: Get current user context operationId: getMe description: Get basic information about the authenticated user and current organization. responses: '200': description: OK content: application/json: schema: type: object properties: user: type: object properties: id: type: string format: uuid description: The id of the current user email: type: string format: email description: The email of the current user required: - id - email organization: type: object properties: id: type: string format: uuid description: The id of the current organization name: type: string description: The name of the current organization required: - id - name required: - user - organization /custom-rules: get: tags: - CustomRules summary: List custom rules operationId: listCustomRules description: List and search custom rules of the organization. parameters: - schema: type: string minLength: 1 description: Filter by custom rule context required: false description: Filter by custom rule context name: context in: query responses: '200': description: OK content: application/json: schema: type: array items: type: object properties: id: type: string format: uuid description: The id of the rule name: type: string description: The name of the rule context: type: string description: The context of the rule severity: type: string description: The severity of the rule createdAt: type: string description: The creation date of the rule updatedAt: type: string description: The last update date of the rule required: - id - name - context - severity - createdAt - updatedAt title: CustomRuleSummarized description: Summarized information about a custom rule '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - CustomRules summary: Create a custom rule operationId: createCustomRule description: Create a custom rule for the organization. requestBody: description: Body of the request to create a custom rule content: application/json: schema: type: object properties: content: type: object properties: rule: oneOf: - type: object properties: alert: type: object properties: severity: type: string enum: - HIGH - MEDIUM - LOW - INFO name: type: string context: type: string category: type: string enum: - ACCESS_CONTROL - CONFIGURATION - INFORMATION_DISCLOSURE - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SENSITIVE_DATA - SCHEMA - CUSTOM description: type: string remediation: type: string compliance: type: object properties: owasp: type: string enum: - API1:2023 - API2:2023 - API3:2023 - API4:2023 - API5:2023 - API6:2023 - API7:2023 - API8:2023 - API9:2023 - API10:2023 - A05:2021 pci-dss: type: string enum: - 1.2.3 - '1.3' - 1.3.7 - 2.2.2 - 2.2.5 - '3.4' - '3.5' - '4.1' - '6.1' - '6.2' - '6.5' - 6.5.1 - 6.5.2 - 6.5.3 - 6.5.4 - 6.5.5 - 6.5.6 - 6.5.7 - 6.5.8 - 6.5.9 - 6.5.10 - '7.1' - 7.1.2 - '8.2' - 8.2.1 - 10.2.4 gdpr: type: string enum: - Article-5 - Article-25 - Article-32 - Article-33 soc2: type: string enum: - CC1 - CC2 - CC4 - CC5 - CC6 - CC7 - CC9 psd2: type: string enum: - Article-5 - Article-21 - Article-32 - Article-94 - Article-95 - Article-96 - Article-97 - Article-98 iso27001: type: string enum: - A.9.1 - A.9.4 - A.10.1 - A.12.1 - A.12.2 - A.12.3 - A.12.6 - A.12.7 - A.13.1 - A.14.1 - A.14.2 - A.17.1 - A.18.1 nist: type: string enum: - SP800-40 - SP800-41 - SP800-44 - SP800-52 - SP800-53 - SP800-63B - SP800-81-2 - SP800-92 - SP800-95 - SP800-123 - SP800-161 - SP800-190 - SP800-207 fedramp: type: string enum: - AC-2 - AC-3 - AC-4 - AC-6 - AC-7 - AC-14 - AC-17 - AC-22 - CM-2 - CM-3 - IA-5 - SA-11 - SC-5 - SC-7 - SC-8 - SC-12 - SC-13 - SC-17 - SC-18 - SC-20 - SC-28 - SI-2 - SI-3 - SI-4 - SI-7 - SI-10 - SI-11 nis2: type: string enum: - Article-6 - Article-21 - Article-22 - Article-23 - Article-28 - Article-29 - Article-33 hipaa: type: string enum: - Standard-1 - Standard-2 - Standard-3 - Standard-4 - Standard-5 owasp_llm: type: string enum: - LLM01 - LLM02 - LLM03 - LLM04 - LLM05 - LLM06 - LLM07 - LLM08 - LLM09 - LLM10 iec62443: type: string enum: - CR 2.1 - CR 3.1 - CR 4.1 - CR 4.3 - CR 5.2 - CR 7.1 - CR 7.6 cwe: type: string enum: - '16' - '20' - '22' - '78' - '79' - '89' - '93' - '94' - '116' - '119' - '200' - '209' - '215' - '264' - '284' - '285' - '287' - '295' - '306' - '307' - '311' - '319' - '326' - '330' - '331' - '346' - '347' - '352' - '353' - '354' - '400' - '444' - '453' - '489' - '502' - '522' - '523' - '524' - '548' - '551' - '573' - '601' - '611' - '614' - '676' - '704' - '710' - '730' - '732' - '758' - '770' - '829' - '862' - '863' - '915' - '918' - '942' - '943' - '1029' - '1195' cra: type: string enum: - Annex I-1 - Article-11 dora: type: string enum: - Article-6 - Article-8 - Article-9 - Article-11 owasp_asvs: type: string enum: - V2 - V3 - V4 - V5 - V6 - V7 - V8 - V9 - V11 - V12 - V13 - V14 wasc: type: string enum: - WASC-02 - WASC-04 - WASC-08 - WASC-09 - WASC-10 - WASC-11 - WASC-13 - WASC-14 - WASC-15 - WASC-19 - WASC-20 - WASC-22 - WASC-24 - WASC-25 - WASC-26 - WASC-31 - WASC-33 - WASC-34 - WASC-38 - WASC-40 - WASC-42 - WASC-43 - WASC-45 - WASC-47 - WASC-48 mitre_attack: type: string enum: - T1531 - T1595 - T1557 - T1110 - T1580 - T1059 - T1659 - T1555 - T1486 - T1530 - T1602 - T1213 - T1565 - T1140 - T1499 - T1190 - T1203 - T1211 - T1068 - T1083 - T1606 - T1592 - T1589 - T1590 - T1525 - T1556 - T1542 - T1496 - T1207 - T1505 - T1553 - T1195 - T1082 - T1221 - T1199 - T1552 - T1550 - T1078 - T1102 - T1220 hitrust_csf: type: string enum: - 01.c - 01.f - 01.g required: - severity - name - context - category type: type: string enum: - API seed: type: array items: oneOf: - type: object properties: protocol: type: string enum: - rest user: type: string path: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: object additionalProperties: type: string body: type: string params: type: object additionalProperties: type: string required: - protocol - type: object properties: protocol: type: string enum: - http user: type: string raw: type: string required: - protocol - raw - type: object properties: protocol: type: string enum: - curl user: type: string curl: type: string required: - protocol - curl transform: type: object properties: trigger: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name mutate: type: array items: oneOf: - type: object properties: key: type: string enum: - schema.url use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - schema.path_ref use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - request.user use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement drop_user: type: boolean required: - key - type: object properties: key: type: string enum: - request.headers use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement name: type: string delete: type: boolean required: - key - name - type: object properties: key: type: string enum: - request.body.json use_extraction: type: - boolean - 'null' jq: type: string required: - key - type: object properties: key: type: string enum: - request.body.text use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - request.object select: type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' mutate: type: object properties: use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - select - mutate - type: object properties: key: type: string enum: - request.method value: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE values: type: array items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE required: - key required: - trigger - mutate detect: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name extractors: type: - array - 'null' items: type: object properties: trigger: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name extract: type: array items: oneOf: - type: object properties: key: type: string enum: - response.body.json variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' jq: type: string required: - key - variable - jq - type: object properties: key: type: string enum: - response.headers variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.body.text variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - response.cookies variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.status_code variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - request.cookies variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.duration variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - request.argument variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' scalars: type: array items: type: string jq: type: string required: - key - variable - type: object properties: key: type: string enum: - schema.url variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable required: - trigger - extract required: - alert - type - detect - type: object properties: alert: type: object properties: severity: type: string enum: - HIGH - MEDIUM - LOW - INFO name: type: string context: type: string category: type: string enum: - ACCESS_CONTROL - CONFIGURATION - INFORMATION_DISCLOSURE - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SENSITIVE_DATA - SCHEMA - CUSTOM description: type: string remediation: type: string compliance: type: object properties: owasp: type: string enum: - API1:2023 - API2:2023 - API3:2023 - API4:2023 - API5:2023 - API6:2023 - API7:2023 - API8:2023 - API9:2023 - API10:2023 - A05:2021 pci-dss: type: string enum: - 1.2.3 - '1.3' - 1.3.7 - 2.2.2 - 2.2.5 - '3.4' - '3.5' - '4.1' - '6.1' - '6.2' - '6.5' - 6.5.1 - 6.5.2 - 6.5.3 - 6.5.4 - 6.5.5 - 6.5.6 - 6.5.7 - 6.5.8 - 6.5.9 - 6.5.10 - '7.1' - 7.1.2 - '8.2' - 8.2.1 - 10.2.4 gdpr: type: string enum: - Article-5 - Article-25 - Article-32 - Article-33 soc2: type: string enum: - CC1 - CC2 - CC4 - CC5 - CC6 - CC7 - CC9 psd2: type: string enum: - Article-5 - Article-21 - Article-32 - Article-94 - Article-95 - Article-96 - Article-97 - Article-98 iso27001: type: string enum: - A.9.1 - A.9.4 - A.10.1 - A.12.1 - A.12.2 - A.12.3 - A.12.6 - A.12.7 - A.13.1 - A.14.1 - A.14.2 - A.17.1 - A.18.1 nist: type: string enum: - SP800-40 - SP800-41 - SP800-44 - SP800-52 - SP800-53 - SP800-63B - SP800-81-2 - SP800-92 - SP800-95 - SP800-123 - SP800-161 - SP800-190 - SP800-207 fedramp: type: string enum: - AC-2 - AC-3 - AC-4 - AC-6 - AC-7 - AC-14 - AC-17 - AC-22 - CM-2 - CM-3 - IA-5 - SA-11 - SC-5 - SC-7 - SC-8 - SC-12 - SC-13 - SC-17 - SC-18 - SC-20 - SC-28 - SI-2 - SI-3 - SI-4 - SI-7 - SI-10 - SI-11 nis2: type: string enum: - Article-6 - Article-21 - Article-22 - Article-23 - Article-28 - Article-29 - Article-33 hipaa: type: string enum: - Standard-1 - Standard-2 - Standard-3 - Standard-4 - Standard-5 owasp_llm: type: string enum: - LLM01 - LLM02 - LLM03 - LLM04 - LLM05 - LLM06 - LLM07 - LLM08 - LLM09 - LLM10 iec62443: type: string enum: - CR 2.1 - CR 3.1 - CR 4.1 - CR 4.3 - CR 5.2 - CR 7.1 - CR 7.6 cwe: type: string enum: - '16' - '20' - '22' - '78' - '79' - '89' - '93' - '94' - '116' - '119' - '200' - '209' - '215' - '264' - '284' - '285' - '287' - '295' - '306' - '307' - '311' - '319' - '326' - '330' - '331' - '346' - '347' - '352' - '353' - '354' - '400' - '444' - '453' - '489' - '502' - '522' - '523' - '524' - '548' - '551' - '573' - '601' - '611' - '614' - '676' - '704' - '710' - '730' - '732' - '758' - '770' - '829' - '862' - '863' - '915' - '918' - '942' - '943' - '1029' - '1195' cra: type: string enum: - Annex I-1 - Article-11 dora: type: string enum: - Article-6 - Article-8 - Article-9 - Article-11 owasp_asvs: type: string enum: - V2 - V3 - V4 - V5 - V6 - V7 - V8 - V9 - V11 - V12 - V13 - V14 wasc: type: string enum: - WASC-02 - WASC-04 - WASC-08 - WASC-09 - WASC-10 - WASC-11 - WASC-13 - WASC-14 - WASC-15 - WASC-19 - WASC-20 - WASC-22 - WASC-24 - WASC-25 - WASC-26 - WASC-31 - WASC-33 - WASC-34 - WASC-38 - WASC-40 - WASC-42 - WASC-43 - WASC-45 - WASC-47 - WASC-48 mitre_attack: type: string enum: - T1531 - T1595 - T1557 - T1110 - T1580 - T1059 - T1659 - T1555 - T1486 - T1530 - T1602 - T1213 - T1565 - T1140 - T1499 - T1190 - T1203 - T1211 - T1068 - T1083 - T1606 - T1592 - T1589 - T1590 - T1525 - T1556 - T1542 - T1496 - T1207 - T1505 - T1553 - T1195 - T1082 - T1221 - T1199 - T1552 - T1550 - T1078 - T1102 - T1220 hitrust_csf: type: string enum: - 01.c - 01.f - 01.g required: - severity - name - context - category type: type: string enum: - WEBAPP seed: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator detect: type: array items: oneOf: - type: object properties: command: type: - string - 'null' if: type: string enum: - js_assertion required: - if - type: object properties: contains: type: - string - 'null' if: type: string enum: - page_selector required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - dialog.message required: - if - type: object properties: contains: type: - string - 'null' if: type: string enum: - page_text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - page_status_code required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - local_storage required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - session_storage required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - cookie required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - header required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if extractors: type: - array - 'null' items: {} required: - alert - type - seed - detect required: - rule dastEnabled: type: boolean description: Whether the custom rule is enabled for DAST inventoryEnabled: type: boolean description: Whether the custom rule is enabled for Inventory tagIds: type: array items: type: string description: The tags of the custom rule required: - content title: CreateCustomRuleRequest responses: '200': description: OK content: application/json: schema: type: object properties: content: type: object properties: rule: oneOf: - type: object properties: id: type: string alert: type: object properties: severity: type: string enum: - HIGH - MEDIUM - LOW - INFO name: type: string context: type: string category: type: string enum: - ACCESS_CONTROL - CONFIGURATION - INFORMATION_DISCLOSURE - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SENSITIVE_DATA - SCHEMA - CUSTOM description: type: string remediation: type: string compliance: type: object properties: owasp: type: string enum: - API1:2023 - API2:2023 - API3:2023 - API4:2023 - API5:2023 - API6:2023 - API7:2023 - API8:2023 - API9:2023 - API10:2023 - A05:2021 pci-dss: type: string enum: - 1.2.3 - '1.3' - 1.3.7 - 2.2.2 - 2.2.5 - '3.4' - '3.5' - '4.1' - '6.1' - '6.2' - '6.5' - 6.5.1 - 6.5.2 - 6.5.3 - 6.5.4 - 6.5.5 - 6.5.6 - 6.5.7 - 6.5.8 - 6.5.9 - 6.5.10 - '7.1' - 7.1.2 - '8.2' - 8.2.1 - 10.2.4 gdpr: type: string enum: - Article-5 - Article-25 - Article-32 - Article-33 soc2: type: string enum: - CC1 - CC2 - CC4 - CC5 - CC6 - CC7 - CC9 psd2: type: string enum: - Article-5 - Article-21 - Article-32 - Article-94 - Article-95 - Article-96 - Article-97 - Article-98 iso27001: type: string enum: - A.9.1 - A.9.4 - A.10.1 - A.12.1 - A.12.2 - A.12.3 - A.12.6 - A.12.7 - A.13.1 - A.14.1 - A.14.2 - A.17.1 - A.18.1 nist: type: string enum: - SP800-40 - SP800-41 - SP800-44 - SP800-52 - SP800-53 - SP800-63B - SP800-81-2 - SP800-92 - SP800-95 - SP800-123 - SP800-161 - SP800-190 - SP800-207 fedramp: type: string enum: - AC-2 - AC-3 - AC-4 - AC-6 - AC-7 - AC-14 - AC-17 - AC-22 - CM-2 - CM-3 - IA-5 - SA-11 - SC-5 - SC-7 - SC-8 - SC-12 - SC-13 - SC-17 - SC-18 - SC-20 - SC-28 - SI-2 - SI-3 - SI-4 - SI-7 - SI-10 - SI-11 nis2: type: string enum: - Article-6 - Article-21 - Article-22 - Article-23 - Article-28 - Article-29 - Article-33 hipaa: type: string enum: - Standard-1 - Standard-2 - Standard-3 - Standard-4 - Standard-5 owasp_llm: type: string enum: - LLM01 - LLM02 - LLM03 - LLM04 - LLM05 - LLM06 - LLM07 - LLM08 - LLM09 - LLM10 iec62443: type: string enum: - CR 2.1 - CR 3.1 - CR 4.1 - CR 4.3 - CR 5.2 - CR 7.1 - CR 7.6 cwe: type: string enum: - '16' - '20' - '22' - '78' - '79' - '89' - '93' - '94' - '116' - '119' - '200' - '209' - '215' - '264' - '284' - '285' - '287' - '295' - '306' - '307' - '311' - '319' - '326' - '330' - '331' - '346' - '347' - '352' - '353' - '354' - '400' - '444' - '453' - '489' - '502' - '522' - '523' - '524' - '548' - '551' - '573' - '601' - '611' - '614' - '676' - '704' - '710' - '730' - '732' - '758' - '770' - '829' - '862' - '863' - '915' - '918' - '942' - '943' - '1029' - '1195' cra: type: string enum: - Annex I-1 - Article-11 dora: type: string enum: - Article-6 - Article-8 - Article-9 - Article-11 owasp_asvs: type: string enum: - V2 - V3 - V4 - V5 - V6 - V7 - V8 - V9 - V11 - V12 - V13 - V14 wasc: type: string enum: - WASC-02 - WASC-04 - WASC-08 - WASC-09 - WASC-10 - WASC-11 - WASC-13 - WASC-14 - WASC-15 - WASC-19 - WASC-20 - WASC-22 - WASC-24 - WASC-25 - WASC-26 - WASC-31 - WASC-33 - WASC-34 - WASC-38 - WASC-40 - WASC-42 - WASC-43 - WASC-45 - WASC-47 - WASC-48 mitre_attack: type: string enum: - T1531 - T1595 - T1557 - T1110 - T1580 - T1059 - T1659 - T1555 - T1486 - T1530 - T1602 - T1213 - T1565 - T1140 - T1499 - T1190 - T1203 - T1211 - T1068 - T1083 - T1606 - T1592 - T1589 - T1590 - T1525 - T1556 - T1542 - T1496 - T1207 - T1505 - T1553 - T1195 - T1082 - T1221 - T1199 - T1552 - T1550 - T1078 - T1102 - T1220 hitrust_csf: type: string enum: - 01.c - 01.f - 01.g required: - severity - name - context - category type: type: string enum: - API seed: type: array items: oneOf: - type: object properties: protocol: type: string enum: - rest user: type: string path: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: object additionalProperties: type: string body: type: string params: type: object additionalProperties: type: string required: - protocol - type: object properties: protocol: type: string enum: - http user: type: string raw: type: string required: - protocol - raw - type: object properties: protocol: type: string enum: - curl user: type: string curl: type: string required: - protocol - curl transform: type: object properties: trigger: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name mutate: type: array items: oneOf: - type: object properties: key: type: string enum: - schema.url use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - schema.path_ref use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - request.user use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement drop_user: type: boolean required: - key - type: object properties: key: type: string enum: - request.headers use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement name: type: string delete: type: boolean required: - key - name - type: object properties: key: type: string enum: - request.body.json use_extraction: type: - boolean - 'null' jq: type: string required: - key - type: object properties: key: type: string enum: - request.body.text use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - request.object select: type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' mutate: type: object properties: use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - select - mutate - type: object properties: key: type: string enum: - request.method value: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE values: type: array items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE required: - key required: - trigger - mutate detect: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name extractors: type: - array - 'null' items: type: object properties: trigger: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name extract: type: array items: oneOf: - type: object properties: key: type: string enum: - response.body.json variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' jq: type: string required: - key - variable - jq - type: object properties: key: type: string enum: - response.headers variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.body.text variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - response.cookies variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.status_code variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - request.cookies variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.duration variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - request.argument variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' scalars: type: array items: type: string jq: type: string required: - key - variable - type: object properties: key: type: string enum: - schema.url variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable required: - trigger - extract required: - id - alert - type - detect - type: object properties: id: type: string alert: type: object properties: severity: type: string enum: - HIGH - MEDIUM - LOW - INFO name: type: string context: type: string category: type: string enum: - ACCESS_CONTROL - CONFIGURATION - INFORMATION_DISCLOSURE - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SENSITIVE_DATA - SCHEMA - CUSTOM description: type: string remediation: type: string compliance: type: object properties: owasp: type: string enum: - API1:2023 - API2:2023 - API3:2023 - API4:2023 - API5:2023 - API6:2023 - API7:2023 - API8:2023 - API9:2023 - API10:2023 - A05:2021 pci-dss: type: string enum: - 1.2.3 - '1.3' - 1.3.7 - 2.2.2 - 2.2.5 - '3.4' - '3.5' - '4.1' - '6.1' - '6.2' - '6.5' - 6.5.1 - 6.5.2 - 6.5.3 - 6.5.4 - 6.5.5 - 6.5.6 - 6.5.7 - 6.5.8 - 6.5.9 - 6.5.10 - '7.1' - 7.1.2 - '8.2' - 8.2.1 - 10.2.4 gdpr: type: string enum: - Article-5 - Article-25 - Article-32 - Article-33 soc2: type: string enum: - CC1 - CC2 - CC4 - CC5 - CC6 - CC7 - CC9 psd2: type: string enum: - Article-5 - Article-21 - Article-32 - Article-94 - Article-95 - Article-96 - Article-97 - Article-98 iso27001: type: string enum: - A.9.1 - A.9.4 - A.10.1 - A.12.1 - A.12.2 - A.12.3 - A.12.6 - A.12.7 - A.13.1 - A.14.1 - A.14.2 - A.17.1 - A.18.1 nist: type: string enum: - SP800-40 - SP800-41 - SP800-44 - SP800-52 - SP800-53 - SP800-63B - SP800-81-2 - SP800-92 - SP800-95 - SP800-123 - SP800-161 - SP800-190 - SP800-207 fedramp: type: string enum: - AC-2 - AC-3 - AC-4 - AC-6 - AC-7 - AC-14 - AC-17 - AC-22 - CM-2 - CM-3 - IA-5 - SA-11 - SC-5 - SC-7 - SC-8 - SC-12 - SC-13 - SC-17 - SC-18 - SC-20 - SC-28 - SI-2 - SI-3 - SI-4 - SI-7 - SI-10 - SI-11 nis2: type: string enum: - Article-6 - Article-21 - Article-22 - Article-23 - Article-28 - Article-29 - Article-33 hipaa: type: string enum: - Standard-1 - Standard-2 - Standard-3 - Standard-4 - Standard-5 owasp_llm: type: string enum: - LLM01 - LLM02 - LLM03 - LLM04 - LLM05 - LLM06 - LLM07 - LLM08 - LLM09 - LLM10 iec62443: type: string enum: - CR 2.1 - CR 3.1 - CR 4.1 - CR 4.3 - CR 5.2 - CR 7.1 - CR 7.6 cwe: type: string enum: - '16' - '20' - '22' - '78' - '79' - '89' - '93' - '94' - '116' - '119' - '200' - '209' - '215' - '264' - '284' - '285' - '287' - '295' - '306' - '307' - '311' - '319' - '326' - '330' - '331' - '346' - '347' - '352' - '353' - '354' - '400' - '444' - '453' - '489' - '502' - '522' - '523' - '524' - '548' - '551' - '573' - '601' - '611' - '614' - '676' - '704' - '710' - '730' - '732' - '758' - '770' - '829' - '862' - '863' - '915' - '918' - '942' - '943' - '1029' - '1195' cra: type: string enum: - Annex I-1 - Article-11 dora: type: string enum: - Article-6 - Article-8 - Article-9 - Article-11 owasp_asvs: type: string enum: - V2 - V3 - V4 - V5 - V6 - V7 - V8 - V9 - V11 - V12 - V13 - V14 wasc: type: string enum: - WASC-02 - WASC-04 - WASC-08 - WASC-09 - WASC-10 - WASC-11 - WASC-13 - WASC-14 - WASC-15 - WASC-19 - WASC-20 - WASC-22 - WASC-24 - WASC-25 - WASC-26 - WASC-31 - WASC-33 - WASC-34 - WASC-38 - WASC-40 - WASC-42 - WASC-43 - WASC-45 - WASC-47 - WASC-48 mitre_attack: type: string enum: - T1531 - T1595 - T1557 - T1110 - T1580 - T1059 - T1659 - T1555 - T1486 - T1530 - T1602 - T1213 - T1565 - T1140 - T1499 - T1190 - T1203 - T1211 - T1068 - T1083 - T1606 - T1592 - T1589 - T1590 - T1525 - T1556 - T1542 - T1496 - T1207 - T1505 - T1553 - T1195 - T1082 - T1221 - T1199 - T1552 - T1550 - T1078 - T1102 - T1220 hitrust_csf: type: string enum: - 01.c - 01.f - 01.g required: - severity - name - context - category type: type: string enum: - WEBAPP seed: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator detect: type: array items: oneOf: - type: object properties: command: type: - string - 'null' if: type: string enum: - js_assertion required: - if - type: object properties: contains: type: - string - 'null' if: type: string enum: - page_selector required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - dialog.message required: - if - type: object properties: contains: type: - string - 'null' if: type: string enum: - page_text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - page_status_code required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - local_storage required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - session_storage required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - cookie required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - header required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if extractors: type: - array - 'null' items: {} required: - id - alert - type - seed - detect required: - rule title: CustomRule description: Detailed information about a custom rule context: type: string description: The context of the custom rule createdAt: type: string description: The created at date of the custom rule dastEnabled: type: boolean description: The dast enabled flag of the custom rule id: type: string description: The id of the custom rule asmEnabled: type: boolean description: The asm enabled flag of the custom rule name: type: string description: The name of the custom rule severity: type: string enum: - HIGH - INFO - LOW - MEDIUM description: The severity of the custom rule tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: TagDetail description: Detailed information about a tag description: The tags of the custom rule updatedAt: type: string description: The updated at date of the custom rule required: - content - context - createdAt - dastEnabled - id - asmEnabled - name - severity - tags - updatedAt '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /custom-rules/{customRuleId}: get: tags: - CustomRules summary: Get a custom rule operationId: getCustomRule description: Get a custom rule of the organization. parameters: - schema: type: string format: uuid required: true name: customRuleId in: path responses: '200': description: OK content: application/json: schema: type: object properties: content: type: object properties: rule: oneOf: - type: object properties: id: type: string alert: type: object properties: severity: type: string enum: - HIGH - MEDIUM - LOW - INFO name: type: string context: type: string category: type: string enum: - ACCESS_CONTROL - CONFIGURATION - INFORMATION_DISCLOSURE - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SENSITIVE_DATA - SCHEMA - CUSTOM description: type: string remediation: type: string compliance: type: object properties: owasp: type: string enum: - API1:2023 - API2:2023 - API3:2023 - API4:2023 - API5:2023 - API6:2023 - API7:2023 - API8:2023 - API9:2023 - API10:2023 - A05:2021 pci-dss: type: string enum: - 1.2.3 - '1.3' - 1.3.7 - 2.2.2 - 2.2.5 - '3.4' - '3.5' - '4.1' - '6.1' - '6.2' - '6.5' - 6.5.1 - 6.5.2 - 6.5.3 - 6.5.4 - 6.5.5 - 6.5.6 - 6.5.7 - 6.5.8 - 6.5.9 - 6.5.10 - '7.1' - 7.1.2 - '8.2' - 8.2.1 - 10.2.4 gdpr: type: string enum: - Article-5 - Article-25 - Article-32 - Article-33 soc2: type: string enum: - CC1 - CC2 - CC4 - CC5 - CC6 - CC7 - CC9 psd2: type: string enum: - Article-5 - Article-21 - Article-32 - Article-94 - Article-95 - Article-96 - Article-97 - Article-98 iso27001: type: string enum: - A.9.1 - A.9.4 - A.10.1 - A.12.1 - A.12.2 - A.12.3 - A.12.6 - A.12.7 - A.13.1 - A.14.1 - A.14.2 - A.17.1 - A.18.1 nist: type: string enum: - SP800-40 - SP800-41 - SP800-44 - SP800-52 - SP800-53 - SP800-63B - SP800-81-2 - SP800-92 - SP800-95 - SP800-123 - SP800-161 - SP800-190 - SP800-207 fedramp: type: string enum: - AC-2 - AC-3 - AC-4 - AC-6 - AC-7 - AC-14 - AC-17 - AC-22 - CM-2 - CM-3 - IA-5 - SA-11 - SC-5 - SC-7 - SC-8 - SC-12 - SC-13 - SC-17 - SC-18 - SC-20 - SC-28 - SI-2 - SI-3 - SI-4 - SI-7 - SI-10 - SI-11 nis2: type: string enum: - Article-6 - Article-21 - Article-22 - Article-23 - Article-28 - Article-29 - Article-33 hipaa: type: string enum: - Standard-1 - Standard-2 - Standard-3 - Standard-4 - Standard-5 owasp_llm: type: string enum: - LLM01 - LLM02 - LLM03 - LLM04 - LLM05 - LLM06 - LLM07 - LLM08 - LLM09 - LLM10 iec62443: type: string enum: - CR 2.1 - CR 3.1 - CR 4.1 - CR 4.3 - CR 5.2 - CR 7.1 - CR 7.6 cwe: type: string enum: - '16' - '20' - '22' - '78' - '79' - '89' - '93' - '94' - '116' - '119' - '200' - '209' - '215' - '264' - '284' - '285' - '287' - '295' - '306' - '307' - '311' - '319' - '326' - '330' - '331' - '346' - '347' - '352' - '353' - '354' - '400' - '444' - '453' - '489' - '502' - '522' - '523' - '524' - '548' - '551' - '573' - '601' - '611' - '614' - '676' - '704' - '710' - '730' - '732' - '758' - '770' - '829' - '862' - '863' - '915' - '918' - '942' - '943' - '1029' - '1195' cra: type: string enum: - Annex I-1 - Article-11 dora: type: string enum: - Article-6 - Article-8 - Article-9 - Article-11 owasp_asvs: type: string enum: - V2 - V3 - V4 - V5 - V6 - V7 - V8 - V9 - V11 - V12 - V13 - V14 wasc: type: string enum: - WASC-02 - WASC-04 - WASC-08 - WASC-09 - WASC-10 - WASC-11 - WASC-13 - WASC-14 - WASC-15 - WASC-19 - WASC-20 - WASC-22 - WASC-24 - WASC-25 - WASC-26 - WASC-31 - WASC-33 - WASC-34 - WASC-38 - WASC-40 - WASC-42 - WASC-43 - WASC-45 - WASC-47 - WASC-48 mitre_attack: type: string enum: - T1531 - T1595 - T1557 - T1110 - T1580 - T1059 - T1659 - T1555 - T1486 - T1530 - T1602 - T1213 - T1565 - T1140 - T1499 - T1190 - T1203 - T1211 - T1068 - T1083 - T1606 - T1592 - T1589 - T1590 - T1525 - T1556 - T1542 - T1496 - T1207 - T1505 - T1553 - T1195 - T1082 - T1221 - T1199 - T1552 - T1550 - T1078 - T1102 - T1220 hitrust_csf: type: string enum: - 01.c - 01.f - 01.g required: - severity - name - context - category type: type: string enum: - API seed: type: array items: oneOf: - type: object properties: protocol: type: string enum: - rest user: type: string path: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: object additionalProperties: type: string body: type: string params: type: object additionalProperties: type: string required: - protocol - type: object properties: protocol: type: string enum: - http user: type: string raw: type: string required: - protocol - raw - type: object properties: protocol: type: string enum: - curl user: type: string curl: type: string required: - protocol - curl transform: type: object properties: trigger: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name mutate: type: array items: oneOf: - type: object properties: key: type: string enum: - schema.url use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - schema.path_ref use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - request.user use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement drop_user: type: boolean required: - key - type: object properties: key: type: string enum: - request.headers use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement name: type: string delete: type: boolean required: - key - name - type: object properties: key: type: string enum: - request.body.json use_extraction: type: - boolean - 'null' jq: type: string required: - key - type: object properties: key: type: string enum: - request.body.text use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - request.object select: type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' mutate: type: object properties: use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - select - mutate - type: object properties: key: type: string enum: - request.method value: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE values: type: array items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE required: - key required: - trigger - mutate detect: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name extractors: type: - array - 'null' items: type: object properties: trigger: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name extract: type: array items: oneOf: - type: object properties: key: type: string enum: - response.body.json variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' jq: type: string required: - key - variable - jq - type: object properties: key: type: string enum: - response.headers variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.body.text variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - response.cookies variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.status_code variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - request.cookies variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.duration variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - request.argument variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' scalars: type: array items: type: string jq: type: string required: - key - variable - type: object properties: key: type: string enum: - schema.url variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable required: - trigger - extract required: - id - alert - type - detect - type: object properties: id: type: string alert: type: object properties: severity: type: string enum: - HIGH - MEDIUM - LOW - INFO name: type: string context: type: string category: type: string enum: - ACCESS_CONTROL - CONFIGURATION - INFORMATION_DISCLOSURE - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SENSITIVE_DATA - SCHEMA - CUSTOM description: type: string remediation: type: string compliance: type: object properties: owasp: type: string enum: - API1:2023 - API2:2023 - API3:2023 - API4:2023 - API5:2023 - API6:2023 - API7:2023 - API8:2023 - API9:2023 - API10:2023 - A05:2021 pci-dss: type: string enum: - 1.2.3 - '1.3' - 1.3.7 - 2.2.2 - 2.2.5 - '3.4' - '3.5' - '4.1' - '6.1' - '6.2' - '6.5' - 6.5.1 - 6.5.2 - 6.5.3 - 6.5.4 - 6.5.5 - 6.5.6 - 6.5.7 - 6.5.8 - 6.5.9 - 6.5.10 - '7.1' - 7.1.2 - '8.2' - 8.2.1 - 10.2.4 gdpr: type: string enum: - Article-5 - Article-25 - Article-32 - Article-33 soc2: type: string enum: - CC1 - CC2 - CC4 - CC5 - CC6 - CC7 - CC9 psd2: type: string enum: - Article-5 - Article-21 - Article-32 - Article-94 - Article-95 - Article-96 - Article-97 - Article-98 iso27001: type: string enum: - A.9.1 - A.9.4 - A.10.1 - A.12.1 - A.12.2 - A.12.3 - A.12.6 - A.12.7 - A.13.1 - A.14.1 - A.14.2 - A.17.1 - A.18.1 nist: type: string enum: - SP800-40 - SP800-41 - SP800-44 - SP800-52 - SP800-53 - SP800-63B - SP800-81-2 - SP800-92 - SP800-95 - SP800-123 - SP800-161 - SP800-190 - SP800-207 fedramp: type: string enum: - AC-2 - AC-3 - AC-4 - AC-6 - AC-7 - AC-14 - AC-17 - AC-22 - CM-2 - CM-3 - IA-5 - SA-11 - SC-5 - SC-7 - SC-8 - SC-12 - SC-13 - SC-17 - SC-18 - SC-20 - SC-28 - SI-2 - SI-3 - SI-4 - SI-7 - SI-10 - SI-11 nis2: type: string enum: - Article-6 - Article-21 - Article-22 - Article-23 - Article-28 - Article-29 - Article-33 hipaa: type: string enum: - Standard-1 - Standard-2 - Standard-3 - Standard-4 - Standard-5 owasp_llm: type: string enum: - LLM01 - LLM02 - LLM03 - LLM04 - LLM05 - LLM06 - LLM07 - LLM08 - LLM09 - LLM10 iec62443: type: string enum: - CR 2.1 - CR 3.1 - CR 4.1 - CR 4.3 - CR 5.2 - CR 7.1 - CR 7.6 cwe: type: string enum: - '16' - '20' - '22' - '78' - '79' - '89' - '93' - '94' - '116' - '119' - '200' - '209' - '215' - '264' - '284' - '285' - '287' - '295' - '306' - '307' - '311' - '319' - '326' - '330' - '331' - '346' - '347' - '352' - '353' - '354' - '400' - '444' - '453' - '489' - '502' - '522' - '523' - '524' - '548' - '551' - '573' - '601' - '611' - '614' - '676' - '704' - '710' - '730' - '732' - '758' - '770' - '829' - '862' - '863' - '915' - '918' - '942' - '943' - '1029' - '1195' cra: type: string enum: - Annex I-1 - Article-11 dora: type: string enum: - Article-6 - Article-8 - Article-9 - Article-11 owasp_asvs: type: string enum: - V2 - V3 - V4 - V5 - V6 - V7 - V8 - V9 - V11 - V12 - V13 - V14 wasc: type: string enum: - WASC-02 - WASC-04 - WASC-08 - WASC-09 - WASC-10 - WASC-11 - WASC-13 - WASC-14 - WASC-15 - WASC-19 - WASC-20 - WASC-22 - WASC-24 - WASC-25 - WASC-26 - WASC-31 - WASC-33 - WASC-34 - WASC-38 - WASC-40 - WASC-42 - WASC-43 - WASC-45 - WASC-47 - WASC-48 mitre_attack: type: string enum: - T1531 - T1595 - T1557 - T1110 - T1580 - T1059 - T1659 - T1555 - T1486 - T1530 - T1602 - T1213 - T1565 - T1140 - T1499 - T1190 - T1203 - T1211 - T1068 - T1083 - T1606 - T1592 - T1589 - T1590 - T1525 - T1556 - T1542 - T1496 - T1207 - T1505 - T1553 - T1195 - T1082 - T1221 - T1199 - T1552 - T1550 - T1078 - T1102 - T1220 hitrust_csf: type: string enum: - 01.c - 01.f - 01.g required: - severity - name - context - category type: type: string enum: - WEBAPP seed: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator detect: type: array items: oneOf: - type: object properties: command: type: - string - 'null' if: type: string enum: - js_assertion required: - if - type: object properties: contains: type: - string - 'null' if: type: string enum: - page_selector required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - dialog.message required: - if - type: object properties: contains: type: - string - 'null' if: type: string enum: - page_text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - page_status_code required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - local_storage required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - session_storage required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - cookie required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - header required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if extractors: type: - array - 'null' items: {} required: - id - alert - type - seed - detect required: - rule title: CustomRule description: Detailed information about a custom rule context: type: string description: The context of the custom rule createdAt: type: string description: The created at date of the custom rule dastEnabled: type: boolean description: The dast enabled flag of the custom rule id: type: string description: The id of the custom rule asmEnabled: type: boolean description: The asm enabled flag of the custom rule name: type: string description: The name of the custom rule severity: type: string enum: - HIGH - INFO - LOW - MEDIUM description: The severity of the custom rule tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: TagDetail description: Detailed information about a tag description: The tags of the custom rule updatedAt: type: string description: The updated at date of the custom rule required: - content - context - createdAt - dastEnabled - id - asmEnabled - name - severity - tags - updatedAt '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist put: tags: - CustomRules summary: Update a custom rule operationId: updateCustomRule description: Update a custom rule for the organization. parameters: - schema: type: string format: uuid description: The ID of the custom rule to update required: true description: The ID of the custom rule to update name: customRuleId in: path requestBody: description: Body of the request to update a custom rule content: application/json: schema: type: object properties: content: type: object properties: rule: oneOf: - type: object properties: alert: type: object properties: severity: type: string enum: - HIGH - MEDIUM - LOW - INFO name: type: string context: type: string category: type: string enum: - ACCESS_CONTROL - CONFIGURATION - INFORMATION_DISCLOSURE - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SENSITIVE_DATA - SCHEMA - CUSTOM description: type: string remediation: type: string compliance: type: object properties: owasp: type: string enum: - API1:2023 - API2:2023 - API3:2023 - API4:2023 - API5:2023 - API6:2023 - API7:2023 - API8:2023 - API9:2023 - API10:2023 - A05:2021 pci-dss: type: string enum: - 1.2.3 - '1.3' - 1.3.7 - 2.2.2 - 2.2.5 - '3.4' - '3.5' - '4.1' - '6.1' - '6.2' - '6.5' - 6.5.1 - 6.5.2 - 6.5.3 - 6.5.4 - 6.5.5 - 6.5.6 - 6.5.7 - 6.5.8 - 6.5.9 - 6.5.10 - '7.1' - 7.1.2 - '8.2' - 8.2.1 - 10.2.4 gdpr: type: string enum: - Article-5 - Article-25 - Article-32 - Article-33 soc2: type: string enum: - CC1 - CC2 - CC4 - CC5 - CC6 - CC7 - CC9 psd2: type: string enum: - Article-5 - Article-21 - Article-32 - Article-94 - Article-95 - Article-96 - Article-97 - Article-98 iso27001: type: string enum: - A.9.1 - A.9.4 - A.10.1 - A.12.1 - A.12.2 - A.12.3 - A.12.6 - A.12.7 - A.13.1 - A.14.1 - A.14.2 - A.17.1 - A.18.1 nist: type: string enum: - SP800-40 - SP800-41 - SP800-44 - SP800-52 - SP800-53 - SP800-63B - SP800-81-2 - SP800-92 - SP800-95 - SP800-123 - SP800-161 - SP800-190 - SP800-207 fedramp: type: string enum: - AC-2 - AC-3 - AC-4 - AC-6 - AC-7 - AC-14 - AC-17 - AC-22 - CM-2 - CM-3 - IA-5 - SA-11 - SC-5 - SC-7 - SC-8 - SC-12 - SC-13 - SC-17 - SC-18 - SC-20 - SC-28 - SI-2 - SI-3 - SI-4 - SI-7 - SI-10 - SI-11 nis2: type: string enum: - Article-6 - Article-21 - Article-22 - Article-23 - Article-28 - Article-29 - Article-33 hipaa: type: string enum: - Standard-1 - Standard-2 - Standard-3 - Standard-4 - Standard-5 owasp_llm: type: string enum: - LLM01 - LLM02 - LLM03 - LLM04 - LLM05 - LLM06 - LLM07 - LLM08 - LLM09 - LLM10 iec62443: type: string enum: - CR 2.1 - CR 3.1 - CR 4.1 - CR 4.3 - CR 5.2 - CR 7.1 - CR 7.6 cwe: type: string enum: - '16' - '20' - '22' - '78' - '79' - '89' - '93' - '94' - '116' - '119' - '200' - '209' - '215' - '264' - '284' - '285' - '287' - '295' - '306' - '307' - '311' - '319' - '326' - '330' - '331' - '346' - '347' - '352' - '353' - '354' - '400' - '444' - '453' - '489' - '502' - '522' - '523' - '524' - '548' - '551' - '573' - '601' - '611' - '614' - '676' - '704' - '710' - '730' - '732' - '758' - '770' - '829' - '862' - '863' - '915' - '918' - '942' - '943' - '1029' - '1195' cra: type: string enum: - Annex I-1 - Article-11 dora: type: string enum: - Article-6 - Article-8 - Article-9 - Article-11 owasp_asvs: type: string enum: - V2 - V3 - V4 - V5 - V6 - V7 - V8 - V9 - V11 - V12 - V13 - V14 wasc: type: string enum: - WASC-02 - WASC-04 - WASC-08 - WASC-09 - WASC-10 - WASC-11 - WASC-13 - WASC-14 - WASC-15 - WASC-19 - WASC-20 - WASC-22 - WASC-24 - WASC-25 - WASC-26 - WASC-31 - WASC-33 - WASC-34 - WASC-38 - WASC-40 - WASC-42 - WASC-43 - WASC-45 - WASC-47 - WASC-48 mitre_attack: type: string enum: - T1531 - T1595 - T1557 - T1110 - T1580 - T1059 - T1659 - T1555 - T1486 - T1530 - T1602 - T1213 - T1565 - T1140 - T1499 - T1190 - T1203 - T1211 - T1068 - T1083 - T1606 - T1592 - T1589 - T1590 - T1525 - T1556 - T1542 - T1496 - T1207 - T1505 - T1553 - T1195 - T1082 - T1221 - T1199 - T1552 - T1550 - T1078 - T1102 - T1220 hitrust_csf: type: string enum: - 01.c - 01.f - 01.g required: - severity - name - context - category type: type: string enum: - API seed: type: array items: oneOf: - type: object properties: protocol: type: string enum: - rest user: type: string path: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: object additionalProperties: type: string body: type: string params: type: object additionalProperties: type: string required: - protocol - type: object properties: protocol: type: string enum: - http user: type: string raw: type: string required: - protocol - raw - type: object properties: protocol: type: string enum: - curl user: type: string curl: type: string required: - protocol - curl transform: type: object properties: trigger: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name mutate: type: array items: oneOf: - type: object properties: key: type: string enum: - schema.url use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - schema.path_ref use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - request.user use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement drop_user: type: boolean required: - key - type: object properties: key: type: string enum: - request.headers use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement name: type: string delete: type: boolean required: - key - name - type: object properties: key: type: string enum: - request.body.json use_extraction: type: - boolean - 'null' jq: type: string required: - key - type: object properties: key: type: string enum: - request.body.text use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - request.object select: type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' mutate: type: object properties: use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - select - mutate - type: object properties: key: type: string enum: - request.method value: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE values: type: array items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE required: - key required: - trigger - mutate detect: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name extractors: type: - array - 'null' items: type: object properties: trigger: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name extract: type: array items: oneOf: - type: object properties: key: type: string enum: - response.body.json variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' jq: type: string required: - key - variable - jq - type: object properties: key: type: string enum: - response.headers variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.body.text variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - response.cookies variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.status_code variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - request.cookies variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.duration variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - request.argument variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' scalars: type: array items: type: string jq: type: string required: - key - variable - type: object properties: key: type: string enum: - schema.url variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable required: - trigger - extract required: - alert - type - detect - type: object properties: alert: type: object properties: severity: type: string enum: - HIGH - MEDIUM - LOW - INFO name: type: string context: type: string category: type: string enum: - ACCESS_CONTROL - CONFIGURATION - INFORMATION_DISCLOSURE - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SENSITIVE_DATA - SCHEMA - CUSTOM description: type: string remediation: type: string compliance: type: object properties: owasp: type: string enum: - API1:2023 - API2:2023 - API3:2023 - API4:2023 - API5:2023 - API6:2023 - API7:2023 - API8:2023 - API9:2023 - API10:2023 - A05:2021 pci-dss: type: string enum: - 1.2.3 - '1.3' - 1.3.7 - 2.2.2 - 2.2.5 - '3.4' - '3.5' - '4.1' - '6.1' - '6.2' - '6.5' - 6.5.1 - 6.5.2 - 6.5.3 - 6.5.4 - 6.5.5 - 6.5.6 - 6.5.7 - 6.5.8 - 6.5.9 - 6.5.10 - '7.1' - 7.1.2 - '8.2' - 8.2.1 - 10.2.4 gdpr: type: string enum: - Article-5 - Article-25 - Article-32 - Article-33 soc2: type: string enum: - CC1 - CC2 - CC4 - CC5 - CC6 - CC7 - CC9 psd2: type: string enum: - Article-5 - Article-21 - Article-32 - Article-94 - Article-95 - Article-96 - Article-97 - Article-98 iso27001: type: string enum: - A.9.1 - A.9.4 - A.10.1 - A.12.1 - A.12.2 - A.12.3 - A.12.6 - A.12.7 - A.13.1 - A.14.1 - A.14.2 - A.17.1 - A.18.1 nist: type: string enum: - SP800-40 - SP800-41 - SP800-44 - SP800-52 - SP800-53 - SP800-63B - SP800-81-2 - SP800-92 - SP800-95 - SP800-123 - SP800-161 - SP800-190 - SP800-207 fedramp: type: string enum: - AC-2 - AC-3 - AC-4 - AC-6 - AC-7 - AC-14 - AC-17 - AC-22 - CM-2 - CM-3 - IA-5 - SA-11 - SC-5 - SC-7 - SC-8 - SC-12 - SC-13 - SC-17 - SC-18 - SC-20 - SC-28 - SI-2 - SI-3 - SI-4 - SI-7 - SI-10 - SI-11 nis2: type: string enum: - Article-6 - Article-21 - Article-22 - Article-23 - Article-28 - Article-29 - Article-33 hipaa: type: string enum: - Standard-1 - Standard-2 - Standard-3 - Standard-4 - Standard-5 owasp_llm: type: string enum: - LLM01 - LLM02 - LLM03 - LLM04 - LLM05 - LLM06 - LLM07 - LLM08 - LLM09 - LLM10 iec62443: type: string enum: - CR 2.1 - CR 3.1 - CR 4.1 - CR 4.3 - CR 5.2 - CR 7.1 - CR 7.6 cwe: type: string enum: - '16' - '20' - '22' - '78' - '79' - '89' - '93' - '94' - '116' - '119' - '200' - '209' - '215' - '264' - '284' - '285' - '287' - '295' - '306' - '307' - '311' - '319' - '326' - '330' - '331' - '346' - '347' - '352' - '353' - '354' - '400' - '444' - '453' - '489' - '502' - '522' - '523' - '524' - '548' - '551' - '573' - '601' - '611' - '614' - '676' - '704' - '710' - '730' - '732' - '758' - '770' - '829' - '862' - '863' - '915' - '918' - '942' - '943' - '1029' - '1195' cra: type: string enum: - Annex I-1 - Article-11 dora: type: string enum: - Article-6 - Article-8 - Article-9 - Article-11 owasp_asvs: type: string enum: - V2 - V3 - V4 - V5 - V6 - V7 - V8 - V9 - V11 - V12 - V13 - V14 wasc: type: string enum: - WASC-02 - WASC-04 - WASC-08 - WASC-09 - WASC-10 - WASC-11 - WASC-13 - WASC-14 - WASC-15 - WASC-19 - WASC-20 - WASC-22 - WASC-24 - WASC-25 - WASC-26 - WASC-31 - WASC-33 - WASC-34 - WASC-38 - WASC-40 - WASC-42 - WASC-43 - WASC-45 - WASC-47 - WASC-48 mitre_attack: type: string enum: - T1531 - T1595 - T1557 - T1110 - T1580 - T1059 - T1659 - T1555 - T1486 - T1530 - T1602 - T1213 - T1565 - T1140 - T1499 - T1190 - T1203 - T1211 - T1068 - T1083 - T1606 - T1592 - T1589 - T1590 - T1525 - T1556 - T1542 - T1496 - T1207 - T1505 - T1553 - T1195 - T1082 - T1221 - T1199 - T1552 - T1550 - T1078 - T1102 - T1220 hitrust_csf: type: string enum: - 01.c - 01.f - 01.g required: - severity - name - context - category type: type: string enum: - WEBAPP seed: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator detect: type: array items: oneOf: - type: object properties: command: type: - string - 'null' if: type: string enum: - js_assertion required: - if - type: object properties: contains: type: - string - 'null' if: type: string enum: - page_selector required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - dialog.message required: - if - type: object properties: contains: type: - string - 'null' if: type: string enum: - page_text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - page_status_code required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - local_storage required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - session_storage required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - cookie required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - header required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if extractors: type: - array - 'null' items: {} required: - alert - type - seed - detect required: - rule description: The content of the custom rule dastEnabled: type: boolean description: Whether the custom rule is enabled for DAST asmEnabled: type: boolean description: Whether the custom rule is enabled for ASM tags: type: array items: type: string format: uuid description: The tags of the custom rule responses: '200': description: OK content: application/json: schema: type: object properties: content: type: object properties: rule: oneOf: - type: object properties: id: type: string alert: type: object properties: severity: type: string enum: - HIGH - MEDIUM - LOW - INFO name: type: string context: type: string category: type: string enum: - ACCESS_CONTROL - CONFIGURATION - INFORMATION_DISCLOSURE - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SENSITIVE_DATA - SCHEMA - CUSTOM description: type: string remediation: type: string compliance: type: object properties: owasp: type: string enum: - API1:2023 - API2:2023 - API3:2023 - API4:2023 - API5:2023 - API6:2023 - API7:2023 - API8:2023 - API9:2023 - API10:2023 - A05:2021 pci-dss: type: string enum: - 1.2.3 - '1.3' - 1.3.7 - 2.2.2 - 2.2.5 - '3.4' - '3.5' - '4.1' - '6.1' - '6.2' - '6.5' - 6.5.1 - 6.5.2 - 6.5.3 - 6.5.4 - 6.5.5 - 6.5.6 - 6.5.7 - 6.5.8 - 6.5.9 - 6.5.10 - '7.1' - 7.1.2 - '8.2' - 8.2.1 - 10.2.4 gdpr: type: string enum: - Article-5 - Article-25 - Article-32 - Article-33 soc2: type: string enum: - CC1 - CC2 - CC4 - CC5 - CC6 - CC7 - CC9 psd2: type: string enum: - Article-5 - Article-21 - Article-32 - Article-94 - Article-95 - Article-96 - Article-97 - Article-98 iso27001: type: string enum: - A.9.1 - A.9.4 - A.10.1 - A.12.1 - A.12.2 - A.12.3 - A.12.6 - A.12.7 - A.13.1 - A.14.1 - A.14.2 - A.17.1 - A.18.1 nist: type: string enum: - SP800-40 - SP800-41 - SP800-44 - SP800-52 - SP800-53 - SP800-63B - SP800-81-2 - SP800-92 - SP800-95 - SP800-123 - SP800-161 - SP800-190 - SP800-207 fedramp: type: string enum: - AC-2 - AC-3 - AC-4 - AC-6 - AC-7 - AC-14 - AC-17 - AC-22 - CM-2 - CM-3 - IA-5 - SA-11 - SC-5 - SC-7 - SC-8 - SC-12 - SC-13 - SC-17 - SC-18 - SC-20 - SC-28 - SI-2 - SI-3 - SI-4 - SI-7 - SI-10 - SI-11 nis2: type: string enum: - Article-6 - Article-21 - Article-22 - Article-23 - Article-28 - Article-29 - Article-33 hipaa: type: string enum: - Standard-1 - Standard-2 - Standard-3 - Standard-4 - Standard-5 owasp_llm: type: string enum: - LLM01 - LLM02 - LLM03 - LLM04 - LLM05 - LLM06 - LLM07 - LLM08 - LLM09 - LLM10 iec62443: type: string enum: - CR 2.1 - CR 3.1 - CR 4.1 - CR 4.3 - CR 5.2 - CR 7.1 - CR 7.6 cwe: type: string enum: - '16' - '20' - '22' - '78' - '79' - '89' - '93' - '94' - '116' - '119' - '200' - '209' - '215' - '264' - '284' - '285' - '287' - '295' - '306' - '307' - '311' - '319' - '326' - '330' - '331' - '346' - '347' - '352' - '353' - '354' - '400' - '444' - '453' - '489' - '502' - '522' - '523' - '524' - '548' - '551' - '573' - '601' - '611' - '614' - '676' - '704' - '710' - '730' - '732' - '758' - '770' - '829' - '862' - '863' - '915' - '918' - '942' - '943' - '1029' - '1195' cra: type: string enum: - Annex I-1 - Article-11 dora: type: string enum: - Article-6 - Article-8 - Article-9 - Article-11 owasp_asvs: type: string enum: - V2 - V3 - V4 - V5 - V6 - V7 - V8 - V9 - V11 - V12 - V13 - V14 wasc: type: string enum: - WASC-02 - WASC-04 - WASC-08 - WASC-09 - WASC-10 - WASC-11 - WASC-13 - WASC-14 - WASC-15 - WASC-19 - WASC-20 - WASC-22 - WASC-24 - WASC-25 - WASC-26 - WASC-31 - WASC-33 - WASC-34 - WASC-38 - WASC-40 - WASC-42 - WASC-43 - WASC-45 - WASC-47 - WASC-48 mitre_attack: type: string enum: - T1531 - T1595 - T1557 - T1110 - T1580 - T1059 - T1659 - T1555 - T1486 - T1530 - T1602 - T1213 - T1565 - T1140 - T1499 - T1190 - T1203 - T1211 - T1068 - T1083 - T1606 - T1592 - T1589 - T1590 - T1525 - T1556 - T1542 - T1496 - T1207 - T1505 - T1553 - T1195 - T1082 - T1221 - T1199 - T1552 - T1550 - T1078 - T1102 - T1220 hitrust_csf: type: string enum: - 01.c - 01.f - 01.g required: - severity - name - context - category type: type: string enum: - API seed: type: array items: oneOf: - type: object properties: protocol: type: string enum: - rest user: type: string path: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: object additionalProperties: type: string body: type: string params: type: object additionalProperties: type: string required: - protocol - type: object properties: protocol: type: string enum: - http user: type: string raw: type: string required: - protocol - raw - type: object properties: protocol: type: string enum: - curl user: type: string curl: type: string required: - protocol - curl transform: type: object properties: trigger: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name mutate: type: array items: oneOf: - type: object properties: key: type: string enum: - schema.url use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - schema.path_ref use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - request.user use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement drop_user: type: boolean required: - key - type: object properties: key: type: string enum: - request.headers use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement name: type: string delete: type: boolean required: - key - name - type: object properties: key: type: string enum: - request.body.json use_extraction: type: - boolean - 'null' jq: type: string required: - key - type: object properties: key: type: string enum: - request.body.text use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - type: object properties: key: type: string enum: - request.object select: type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' mutate: type: object properties: use_extraction: type: - boolean - 'null' value: type: string values: type: array items: type: string regex_replace: type: object properties: use_extraction: type: - boolean - 'null' pattern: type: string replacement: type: string required: - pattern - replacement required: - key - select - mutate - type: object properties: key: type: string enum: - request.method value: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE values: type: array items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE required: - key required: - trigger - mutate detect: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name extractors: type: - array - 'null' items: type: object properties: trigger: type: array items: oneOf: - type: object properties: is: type: - string - 'null' enum: - GRAPHQL - REST - null is_not: type: - string - 'null' enum: - GRAPHQL - REST - null in: type: - array - 'null' items: type: string enum: - GRAPHQL - REST if: type: string enum: - scan.type required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.path_ref required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - schema.url required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - schema.need_authentication required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.response.is_successful required: - if - type: object properties: is: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null is_not: type: - string - 'null' enum: - CREATE - READ - UPDATE - DELETE - null in: type: - array - 'null' items: type: string enum: - CREATE - READ - UPDATE - DELETE if: type: string enum: - helpers.request.crud required: - if - type: object properties: is: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null is_not: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null in: type: - array - 'null' items: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE if: type: string enum: - request.method required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.object required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - request.is_authenticated required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.user required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - request.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - request.body.text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.status_code required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - response.duration_ms required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.headers required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: {} is_not: {} in: type: - array - 'null' items: {} jq: type: - string - 'null' if: type: string enum: - response.body.json required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.body.text required: - if - type: object properties: type: type: - object - 'null' properties: is: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null is_not: type: - string - 'null' enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code - null in: type: - array - 'null' items: type: string enum: - adobe_client_secret - age_secret_key - alibaba_access_key_id - alibaba_secret_key - amount - application - area_code - asana_client_secret - atlassian_api_token - authentication - author - authorization_code - aws_access_token - aws_mws_id - bank - bank_account - bank_card - base64 - bcrypt - beamer_api_token - bearer - bearer_uuid - bitbucket_client_secret - bitcoin - body_type - boolean - boolean_wannabe - building - card_type - category - city - clojars_api_token - command - commit_hash - confirmation_code - content_type - country - country_code - county - coupon_code - cuid - currency_code - cvv - dash - databricks_api_token - datadog_access_token - date - datetime - delivery_method - device_name - device_type - did - digitalocean_pat - directory - discount - document_type - doppler_api_token - driving_license - dropbox_api_token - dropbox_long_lived_api_token - dropbox_short_lived_api_token - duffel_api_token - duration - dynatrace_api_token - e_commerce_indicator - email - environment - ethereum - event_type - facebook - fee - file - float - form - french_phone - func - gender - github_app_token - github_fine_grained_pat - github_oauth - github_pat - github_refresh_token - gitlab_pat - gitlab_rrt - google_api_key - grafana_service_account_token - hash - hashicorp_tf_api_token - health_insurance_number - heroku_api_key - hex_color_code - hexadecimal - host - house_number - hsl - hsla - html_body - http_method - hubspot_api_key - huggingface_token - id - identity_number - injection - integer - intercom_api_key - ipc_patent - ipv4 - ipv6 - isbn - item - jfrog_api_key - join - json - jwt - language_iso_639_1 - language_iso_639_2 - latitude - launchdarkly_access_token - legal_name - limit - linear_api_key - linear_client_secret - linkedin_client_secret - llm_input - lob_api_key - locale - location - longitude - mac - mailchimp_api_key - mailgun_private_api_token - mailgun_signing_key - mask - md5 - medical_record_number - merchant - messagebird_api_token - microsoft_teams_webhook - monero - mongo_db_object_id - month - navigation - netlify_access_token - new_relic_user_api_id - npm_access_token - offset - okta_access_token - openai_api_key - pagination - pagination_limit - pagination_wannabe - passport - password - permission - phone - pin_code - plan - planetscale_api_token - planetscale_password - policy - port - postman_api_token - prescription_number - price - private_key - protocol - pubnubpublishkey - pulumi_api_token - pypi_upload_token - reason_code - reference - region - return_type - rgb - rgba - role - rubygems_api_token - search - secret - sendgrid_api_token - sendinblue_api_token - sentry_access_token - serial_number - sha1 - sha256 - shipping_method - shippo_api_token - shopify_access_token - shopify_custom_access_token - shopify_private_app_access_token - shopify_shared_secret - sidekiq_secret - slack_bot_token - slack_legacy_workspace_token - slack_user_token - slack_webhook_url - slug - social_security_number - software_component - ssh_url - status - status_code - status_message - street_address - string - stripe_access_token - stripe_public_access_token - sumologic_access_token - time - timestamp - title - twitch_api_token - twitter_api_key - typeform_api_token - unsanitized_payload - upload - uri - url - us_bank_account_number - us_bank_routing_number - us_zip_code - user_agent - username - uuid - vault_service_token - vehicle_type - version - view - year - zendesk_secret_key - zip_code name: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - response.object required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.json_matches.count jq: type: string required: - if - jq - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.regex_matches.count regex: type: string required: - if - regex - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - helpers.fingerprints.count required: - if - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.json_matches.all jq: type: string required: - if - jq - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.regex_matches.all regex: type: string required: - if - regex - type: object properties: is: type: - boolean - 'null' is_not: type: - boolean - 'null' if: type: string enum: - helpers.fingerprints.same required: - if - type: object properties: if: type: string enum: - variable.defined variable_name: type: string required: - if - variable_name extract: type: array items: oneOf: - type: object properties: key: type: string enum: - response.body.json variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' jq: type: string required: - key - variable - jq - type: object properties: key: type: string enum: - response.headers variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.body.text variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - response.cookies variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.status_code variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - request.cookies variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' name: type: string required: - key - variable - name - type: object properties: key: type: string enum: - response.duration variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable - type: object properties: key: type: string enum: - request.argument variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' scalars: type: array items: type: string jq: type: string required: - key - variable - type: object properties: key: type: string enum: - schema.url variable: type: string can_overwrite: type: - boolean - 'null' accept_null: type: - boolean - 'null' required: - key - variable required: - trigger - extract required: - id - alert - type - detect - type: object properties: id: type: string alert: type: object properties: severity: type: string enum: - HIGH - MEDIUM - LOW - INFO name: type: string context: type: string category: type: string enum: - ACCESS_CONTROL - CONFIGURATION - INFORMATION_DISCLOSURE - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SENSITIVE_DATA - SCHEMA - CUSTOM description: type: string remediation: type: string compliance: type: object properties: owasp: type: string enum: - API1:2023 - API2:2023 - API3:2023 - API4:2023 - API5:2023 - API6:2023 - API7:2023 - API8:2023 - API9:2023 - API10:2023 - A05:2021 pci-dss: type: string enum: - 1.2.3 - '1.3' - 1.3.7 - 2.2.2 - 2.2.5 - '3.4' - '3.5' - '4.1' - '6.1' - '6.2' - '6.5' - 6.5.1 - 6.5.2 - 6.5.3 - 6.5.4 - 6.5.5 - 6.5.6 - 6.5.7 - 6.5.8 - 6.5.9 - 6.5.10 - '7.1' - 7.1.2 - '8.2' - 8.2.1 - 10.2.4 gdpr: type: string enum: - Article-5 - Article-25 - Article-32 - Article-33 soc2: type: string enum: - CC1 - CC2 - CC4 - CC5 - CC6 - CC7 - CC9 psd2: type: string enum: - Article-5 - Article-21 - Article-32 - Article-94 - Article-95 - Article-96 - Article-97 - Article-98 iso27001: type: string enum: - A.9.1 - A.9.4 - A.10.1 - A.12.1 - A.12.2 - A.12.3 - A.12.6 - A.12.7 - A.13.1 - A.14.1 - A.14.2 - A.17.1 - A.18.1 nist: type: string enum: - SP800-40 - SP800-41 - SP800-44 - SP800-52 - SP800-53 - SP800-63B - SP800-81-2 - SP800-92 - SP800-95 - SP800-123 - SP800-161 - SP800-190 - SP800-207 fedramp: type: string enum: - AC-2 - AC-3 - AC-4 - AC-6 - AC-7 - AC-14 - AC-17 - AC-22 - CM-2 - CM-3 - IA-5 - SA-11 - SC-5 - SC-7 - SC-8 - SC-12 - SC-13 - SC-17 - SC-18 - SC-20 - SC-28 - SI-2 - SI-3 - SI-4 - SI-7 - SI-10 - SI-11 nis2: type: string enum: - Article-6 - Article-21 - Article-22 - Article-23 - Article-28 - Article-29 - Article-33 hipaa: type: string enum: - Standard-1 - Standard-2 - Standard-3 - Standard-4 - Standard-5 owasp_llm: type: string enum: - LLM01 - LLM02 - LLM03 - LLM04 - LLM05 - LLM06 - LLM07 - LLM08 - LLM09 - LLM10 iec62443: type: string enum: - CR 2.1 - CR 3.1 - CR 4.1 - CR 4.3 - CR 5.2 - CR 7.1 - CR 7.6 cwe: type: string enum: - '16' - '20' - '22' - '78' - '79' - '89' - '93' - '94' - '116' - '119' - '200' - '209' - '215' - '264' - '284' - '285' - '287' - '295' - '306' - '307' - '311' - '319' - '326' - '330' - '331' - '346' - '347' - '352' - '353' - '354' - '400' - '444' - '453' - '489' - '502' - '522' - '523' - '524' - '548' - '551' - '573' - '601' - '611' - '614' - '676' - '704' - '710' - '730' - '732' - '758' - '770' - '829' - '862' - '863' - '915' - '918' - '942' - '943' - '1029' - '1195' cra: type: string enum: - Annex I-1 - Article-11 dora: type: string enum: - Article-6 - Article-8 - Article-9 - Article-11 owasp_asvs: type: string enum: - V2 - V3 - V4 - V5 - V6 - V7 - V8 - V9 - V11 - V12 - V13 - V14 wasc: type: string enum: - WASC-02 - WASC-04 - WASC-08 - WASC-09 - WASC-10 - WASC-11 - WASC-13 - WASC-14 - WASC-15 - WASC-19 - WASC-20 - WASC-22 - WASC-24 - WASC-25 - WASC-26 - WASC-31 - WASC-33 - WASC-34 - WASC-38 - WASC-40 - WASC-42 - WASC-43 - WASC-45 - WASC-47 - WASC-48 mitre_attack: type: string enum: - T1531 - T1595 - T1557 - T1110 - T1580 - T1059 - T1659 - T1555 - T1486 - T1530 - T1602 - T1213 - T1565 - T1140 - T1499 - T1190 - T1203 - T1211 - T1068 - T1083 - T1606 - T1592 - T1589 - T1590 - T1525 - T1556 - T1542 - T1496 - T1207 - T1505 - T1553 - T1195 - T1082 - T1221 - T1199 - T1552 - T1550 - T1078 - T1102 - T1220 hitrust_csf: type: string enum: - 01.c - 01.f - 01.g required: - severity - name - context - category type: type: string enum: - WEBAPP seed: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator detect: type: array items: oneOf: - type: object properties: command: type: - string - 'null' if: type: string enum: - js_assertion required: - if - type: object properties: contains: type: - string - 'null' if: type: string enum: - page_selector required: - if - type: object properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - dialog.message required: - if - type: object properties: contains: type: - string - 'null' if: type: string enum: - page_text required: - if - type: object properties: is: type: - number - 'null' is_not: type: - number - 'null' in: type: - array - 'null' items: type: number gt: type: - number - 'null' lt: type: - number - 'null' if: type: string enum: - page_status_code required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - local_storage required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - session_storage required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - cookie required: - if - type: object properties: key: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' value: type: - object - 'null' properties: use_extraction: type: - boolean - 'null' is: type: - string - 'null' is_not: type: - string - 'null' in: type: - array - 'null' items: type: string contains: type: - string - 'null' regex: type: - string - 'null' if: type: string enum: - header required: - if - type: object properties: and: type: array items: {} if: type: string enum: - and required: - and - if - type: object properties: or: type: array items: {} if: type: string enum: - or required: - or - if - type: object properties: not: {} if: type: string enum: - not required: - if extractors: type: - array - 'null' items: {} required: - id - alert - type - seed - detect required: - rule title: CustomRule description: Detailed information about a custom rule context: type: string description: The context of the custom rule createdAt: type: string description: The created at date of the custom rule dastEnabled: type: boolean description: The dast enabled flag of the custom rule id: type: string description: The id of the custom rule asmEnabled: type: boolean description: The asm enabled flag of the custom rule name: type: string description: The name of the custom rule severity: type: string enum: - HIGH - INFO - LOW - MEDIUM description: The severity of the custom rule tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: TagDetail description: Detailed information about a tag description: The tags of the custom rule updatedAt: type: string description: The updated at date of the custom rule required: - content - context - createdAt - dastEnabled - id - asmEnabled - name - severity - tags - updatedAt '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation delete: tags: - CustomRules summary: Delete a custom rule operationId: deleteCustomRule description: Delete a custom rule for the organization. parameters: - schema: type: string format: uuid description: The ID of the custom rule to delete required: true description: The ID of the custom rule to delete name: customRuleId in: path responses: '200': description: OK content: application/json: schema: type: object properties: deleted: type: boolean required: - deleted '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /projects: get: tags: - Projects summary: List projects operationId: listProjects description: List and search projects of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: string description: Search term to filter projects by name example: My Super Project required: false description: Search term to filter projects by name name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Projects summary: Create a project operationId: createProject description: Create a project for the organization. requestBody: description: Body of the request to create a project required: true content: application/json: schema: type: object properties: name: type: string description: The name of the project example: My super project slug: type: string description: The slug of the project example: my-super-project bindings: type: array items: type: object properties: roleId: type: string description: The role ID example: 00000000-0000-0000-0000-000000000000 userId: type: string description: The user ID example: 00000000-0000-0000-0000-000000000000 required: - roleId - userId description: An optional list of role bindings to create for the project example: - roleId: 00000000-0000-0000-0000-000000000000 userId: 00000000-0000-0000-0000-000000000000 required: - name - slug - bindings responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created role: type: object properties: id: type: string format: uuid description: The id of the role name: type: string description: The name of the role createdAt: type: string format: date-time description: The date and time the role was created required: - id - name - createdAt project: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created required: - id - name - createdAt user: type: object properties: id: type: string format: uuid description: The id of the user email: type: string format: email description: The email of the user createdAt: type: string format: date-time description: The date and time the user was created activatedAt: type: - string - 'null' format: date-time description: The date and time the user was activated required: - id - email - createdAt - activatedAt required: - id - createdAt - role - project - user description: The bindings of the project required: - id - name - createdAt - bindings '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /projects/{projectId}: get: tags: - Projects summary: Get a project operationId: getProject description: Get a project by ID. parameters: - schema: type: string description: The project ID example: 00000000-0000-0000-0000-000000000000 required: true description: The project ID name: projectId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created role: type: object properties: id: type: string format: uuid description: The id of the role name: type: string description: The name of the role createdAt: type: string format: date-time description: The date and time the role was created required: - id - name - createdAt project: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created required: - id - name - createdAt user: type: object properties: id: type: string format: uuid description: The id of the user email: type: string format: email description: The email of the user createdAt: type: string format: date-time description: The date and time the user was created activatedAt: type: - string - 'null' format: date-time description: The date and time the user was activated required: - id - email - createdAt - activatedAt required: - id - createdAt - role - project - user description: The bindings of the project required: - id - name - createdAt - bindings put: tags: - Projects summary: Update a project operationId: updateProject description: Update a project. parameters: - schema: type: string description: The project ID example: 00000000-0000-0000-0000-000000000000 required: true description: The project ID name: projectId in: path requestBody: required: true description: Body of the request to update a project content: application/json: schema: type: object properties: project: type: object properties: name: type: string description: The name of the project example: My updated super project slug: type: string description: The slug of the project example: my-updated-super-project required: - project responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created role: type: object properties: id: type: string format: uuid description: The id of the role name: type: string description: The name of the role createdAt: type: string format: date-time description: The date and time the role was created required: - id - name - createdAt project: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created required: - id - name - createdAt user: type: object properties: id: type: string format: uuid description: The id of the user email: type: string format: email description: The email of the user createdAt: type: string format: date-time description: The date and time the user was created activatedAt: type: - string - 'null' format: date-time description: The date and time the user was activated required: - id - email - createdAt - activatedAt required: - id - createdAt - role - project - user description: The bindings of the project required: - id - name - createdAt - bindings '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /roles: get: tags: - Roles summary: List roles operationId: listRoles description: List and search roles of the organization. responses: '200': description: OK content: application/json: schema: type: array items: type: object properties: id: type: string format: uuid description: The id of the role name: type: string description: The name of the role permissions: type: array items: type: string enum: - ADMIN - EDIT_ASSETS - EDIT_CUSTOM_RULES - EDIT_INTEGRATIONS - EDIT_PROFILES - EDIT_TAGS - EDIT_WORKFLOWS - MANAGE_REPORTING - VIEW_ONLY description: The permissions of the role createdAt: type: string format: date-time description: The date and time the role was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the role required: - id - name - permissions - createdAt - bindings post: tags: - Roles summary: Create a role operationId: createRole description: Create a role for the organization. requestBody: description: Body of the request to create a role required: true content: application/json: schema: type: object properties: name: type: string description: The name of the role example: My super role permissions: type: array items: type: string enum: - ADMIN - EDIT_ASSETS - EDIT_CUSTOM_RULES - EDIT_INTEGRATIONS - EDIT_PROFILES - EDIT_TAGS - EDIT_WORKFLOWS - MANAGE_REPORTING - VIEW_ONLY description: The permissions of the role example: - EDIT_ASSETS bindings: type: array items: type: object properties: roleId: type: string description: The role ID example: 00000000-0000-0000-0000-000000000000 userId: type: string description: The user ID example: 00000000-0000-0000-0000-000000000000 required: - roleId - userId description: An optional list of role bindings to create for the role example: - roleId: 00000000-0000-0000-0000-000000000000 userId: 00000000-0000-0000-0000-000000000000 required: - name - permissions - bindings responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the role name: type: string description: The name of the role permissions: type: array items: type: string enum: - ADMIN - EDIT_ASSETS - EDIT_CUSTOM_RULES - EDIT_INTEGRATIONS - EDIT_PROFILES - EDIT_TAGS - EDIT_WORKFLOWS - MANAGE_REPORTING - VIEW_ONLY description: The permissions of the role createdAt: type: string format: date-time description: The date and time the role was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created role: type: object properties: id: type: string format: uuid description: The id of the role name: type: string description: The name of the role createdAt: type: string format: date-time description: The date and time the role was created required: - id - name - createdAt project: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created required: - id - name - createdAt user: type: object properties: id: type: string format: uuid description: The id of the user email: type: string format: email description: The email of the user createdAt: type: string format: date-time description: The date and time the user was created activatedAt: type: - string - 'null' format: date-time description: The date and time the user was activated required: - id - email - createdAt - activatedAt required: - id - createdAt - role - project - user description: The bindings of the role required: - id - name - permissions - createdAt - bindings '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /roles/bindings: post: tags: - Roles summary: Create role bindings operationId: createRoleBindings description: Create role bindings. requestBody: description: Body of the request to create a role binding required: true content: application/json: schema: type: object properties: bindings: type: array items: type: object properties: roleId: type: string format: uuid description: The role ID example: 00000000-0000-0000-0000-000000000000 projectId: type: - string - 'null' format: uuid description: The project ID example: 00000000-0000-0000-0000-000000000000 userId: type: string format: uuid description: The user ID example: 00000000-0000-0000-0000-000000000000 required: - roleId - userId description: The role bindings to create example: - roleId: 00000000-0000-0000-0000-000000000000 projectId: 00000000-0000-0000-0000-000000000000 userId: 00000000-0000-0000-0000-000000000000 - roleId: 11111111-1111-1111-1111-111111111111 userId: 11111111-1111-1111-1111-111111111111 required: - bindings responses: '200': description: OK content: application/json: schema: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding userId: type: string format: uuid description: The id of the user projectId: type: string format: uuid description: The id of the project roleId: type: string format: uuid description: The id of the role required: - id - userId - projectId - roleId description: The created role bindings '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /roles/bindings/{bindingId}: delete: tags: - Roles summary: Delete a role binding operationId: deleteRoleBinding description: Delete a role binding. parameters: - schema: type: string description: The role binding ID example: 00000000-0000-0000-0000-000000000000 required: true description: The role binding ID name: bindingId in: path responses: '200': description: OK content: application/json: schema: type: object properties: deleted: type: boolean required: - deleted '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /roles/{roleId}: get: tags: - Roles summary: Get a role operationId: getRole description: Get a role by ID. parameters: - schema: type: string description: The role ID example: 00000000-0000-0000-0000-000000000000 required: true description: The role ID name: roleId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the role name: type: string description: The name of the role permissions: type: array items: type: string enum: - ADMIN - EDIT_ASSETS - EDIT_CUSTOM_RULES - EDIT_INTEGRATIONS - EDIT_PROFILES - EDIT_TAGS - EDIT_WORKFLOWS - MANAGE_REPORTING - VIEW_ONLY description: The permissions of the role createdAt: type: string format: date-time description: The date and time the role was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created role: type: object properties: id: type: string format: uuid description: The id of the role name: type: string description: The name of the role createdAt: type: string format: date-time description: The date and time the role was created required: - id - name - createdAt project: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created required: - id - name - createdAt user: type: object properties: id: type: string format: uuid description: The id of the user email: type: string format: email description: The email of the user createdAt: type: string format: date-time description: The date and time the user was created activatedAt: type: - string - 'null' format: date-time description: The date and time the user was activated required: - id - email - createdAt - activatedAt required: - id - createdAt - role - project - user description: The bindings of the role required: - id - name - permissions - createdAt - bindings put: tags: - Roles summary: Update a role operationId: updateRole description: Update a role. parameters: - schema: type: string description: The role ID example: 00000000-0000-0000-0000-000000000000 required: true description: The role ID name: roleId in: path requestBody: required: true description: Body of the request to update a role content: application/json: schema: type: object properties: role: type: object properties: name: type: string description: The name of the role example: My super role permissions: type: array items: type: string enum: - ADMIN - EDIT_ASSETS - EDIT_CUSTOM_RULES - EDIT_INTEGRATIONS - EDIT_PROFILES - EDIT_TAGS - EDIT_WORKFLOWS - MANAGE_REPORTING - VIEW_ONLY description: The permissions of the role example: - EDIT_ASSETS - EDIT_CUSTOM_RULES required: - role responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the role name: type: string description: The name of the role permissions: type: array items: type: string enum: - ADMIN - EDIT_ASSETS - EDIT_CUSTOM_RULES - EDIT_INTEGRATIONS - EDIT_PROFILES - EDIT_TAGS - EDIT_WORKFLOWS - MANAGE_REPORTING - VIEW_ONLY description: The permissions of the role createdAt: type: string format: date-time description: The date and time the role was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created role: type: object properties: id: type: string format: uuid description: The id of the role name: type: string description: The name of the role createdAt: type: string format: date-time description: The date and time the role was created required: - id - name - createdAt project: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created required: - id - name - createdAt user: type: object properties: id: type: string format: uuid description: The id of the user email: type: string format: email description: The email of the user createdAt: type: string format: date-time description: The date and time the user was created activatedAt: type: - string - 'null' format: date-time description: The date and time the user was activated required: - id - email - createdAt - activatedAt required: - id - createdAt - role - project - user description: The bindings of the role required: - id - name - permissions - createdAt - bindings '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /users: get: tags: - Users summary: List users operationId: listUsers description: List users of the organization. responses: '200': description: OK content: application/json: schema: type: array items: type: object properties: id: type: string format: uuid description: The id of the user email: type: string format: email description: The email of the user createdAt: type: string format: date-time description: The date and time the user was created activatedAt: type: - string - 'null' format: date-time description: The date and time the user was activated roleBindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The role bindings of the user required: - id - email - createdAt - activatedAt - roleBindings /users/invite: post: tags: - Users summary: Invite users operationId: inviteUser description: Invite users to the organization, and give them roles. requestBody: description: Body of the request to invite users required: true content: application/json: schema: type: object properties: emails: type: array items: type: string format: email description: The emails of the users to invite bindings: type: array items: type: object properties: roleId: type: string description: The role ID example: 00000000-0000-0000-0000-000000000000 projectId: type: - string - 'null' description: An optional project ID example: 00000000-0000-0000-0000-000000000000 required: - roleId description: An optional list of role bindings to create for the users example: - roleId: 00000000-0000-0000-0000-000000000000 projectId: 00000000-0000-0000-0000-000000000000 required: - emails responses: '200': description: OK content: application/json: schema: type: array items: type: object properties: id: type: string format: uuid description: The id of the user email: type: string format: email description: The email of the user createdAt: type: string format: date-time description: The date and time the user was created activatedAt: type: - string - 'null' format: date-time description: The date and time the user was activated roleBindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The role bindings of the user required: - id - email - createdAt - activatedAt - roleBindings '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /users/{userId}: get: tags: - Users summary: Get a user operationId: getUser description: Get a user by ID. parameters: - schema: type: string description: The user ID example: 00000000-0000-0000-0000-000000000000 required: true description: The user ID name: userId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the user email: type: string format: email description: The email of the user createdAt: type: string format: date-time description: The date and time the user was created activatedAt: type: - string - 'null' format: date-time description: The date and time the user was activated roleBindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created role: type: object properties: id: type: string format: uuid description: The id of the role name: type: string description: The name of the role createdAt: type: string format: date-time description: The date and time the role was created required: - id - name - createdAt project: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created required: - id - name - createdAt user: type: object properties: id: type: string format: uuid description: The id of the user email: type: string format: email description: The email of the user createdAt: type: string format: date-time description: The date and time the user was created activatedAt: type: - string - 'null' format: date-time description: The date and time the user was activated required: - id - email - createdAt - activatedAt required: - id - createdAt - role - project - user description: The bindings of the user required: - id - email - createdAt - activatedAt - roleBindings /integrations/akamai: get: tags: - Integrations summary: List Akamai integrations. operationId: listakamaiIntegrations description: List and search Akamai integrations of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string format: uuid description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query - schema: type: array items: type: string format: uuid description: Filter by integration IDs required: false description: Filter by integration IDs name: ids in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by location IDs required: false description: Filter by location IDs name: locationIds in: query - schema: type: string description: Search term to filter integrations by name or description example: my integration required: false description: Search term to filter integrations by name or description name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration location: type: - object - 'null' properties: id: type: string format: uuid description: The location ID. name: type: string description: The name of the location. type: type: string description: The type of the location. enabled: type: boolean description: Whether the location is enabled. lastSeenAt: type: - string - 'null' description: The date and time the location agent last connected. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - id - name - type - enabled - links title: LocationSummarized description: The location of the integration kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - projects - location - kind - valid - validationErrors required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Integrations summary: Create Akamai integrations. operationId: createakamaiIntegration description: Create a Akamai integration. requestBody: content: application/json: schema: type: object properties: organizationId: type: string format: uuid description: The organization ID to create the integration for name: type: string description: The name of the integration parameters: type: object properties: client_secret: type: string host: type: string access_token: type: string client_token: type: string required: - client_secret - host - access_token - client_token description: The parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to create the integration for example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to create the integration for example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - name - parameters responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: client_secret: type: string host: type: string access_token: type: string client_token: type: string required: - client_secret - host - access_token - client_token description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /integrations/akamai/{id}: get: tags: - Integrations summary: Get Akamai integration. operationId: getakamaiIntegration description: Get a Akamai integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: client_secret: type: string host: type: string access_token: type: string client_token: type: string required: - client_secret - host - access_token - client_token description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation put: tags: - Integrations summary: Update Akamai integration. operationId: updateakamaiIntegration description: Update a Akamai integration. parameters: - schema: type: string format: uuid description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The new name of the integration parameters: type: object properties: client_secret: type: string host: type: string access_token: type: string client_token: type: string required: - client_secret - host - access_token - client_token description: The new parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to attach to the integration example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to attach to the integration example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: client_secret: type: string host: type: string access_token: type: string client_token: type: string required: - client_secret - host - access_token - client_token description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation delete: tags: - Integrations summary: Delete Akamai integration. operationId: deleteakamaiIntegration description: Delete a Akamai integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: client_secret: type: string host: type: string access_token: type: string client_token: type: string required: - client_secret - host - access_token - client_token description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /integrations/aws: get: tags: - Integrations summary: List AWS integrations. operationId: listawsIntegrations description: List and search AWS integrations of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string format: uuid description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query - schema: type: array items: type: string format: uuid description: Filter by integration IDs required: false description: Filter by integration IDs name: ids in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by location IDs required: false description: Filter by location IDs name: locationIds in: query - schema: type: string description: Search term to filter integrations by name or description example: my integration required: false description: Search term to filter integrations by name or description name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration location: type: - object - 'null' properties: id: type: string format: uuid description: The location ID. name: type: string description: The name of the location. type: type: string description: The type of the location. enabled: type: boolean description: Whether the location is enabled. lastSeenAt: type: - string - 'null' description: The date and time the location agent last connected. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - id - name - type - enabled - links title: LocationSummarized description: The location of the integration kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - projects - location - kind - valid - validationErrors required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Integrations summary: Create AWS integrations. operationId: createawsIntegration description: Create a AWS integration. requestBody: content: application/json: schema: type: object properties: organizationId: type: string format: uuid description: The organization ID to create the integration for name: type: string description: The name of the integration parameters: type: object properties: public_key: type: string private_key: type: string required: - public_key - private_key description: The parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to create the integration for example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to create the integration for example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - name - parameters responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: public_key: type: string private_key: type: string required: - public_key - private_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /integrations/aws/{id}: get: tags: - Integrations summary: Get AWS integration. operationId: getawsIntegration description: Get a AWS integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: public_key: type: string private_key: type: string required: - public_key - private_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation put: tags: - Integrations summary: Update AWS integration. operationId: updateawsIntegration description: Update a AWS integration. parameters: - schema: type: string format: uuid description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The new name of the integration parameters: type: object properties: public_key: type: string private_key: type: string required: - public_key - private_key description: The new parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to attach to the integration example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to attach to the integration example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: public_key: type: string private_key: type: string required: - public_key - private_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation delete: tags: - Integrations summary: Delete AWS integration. operationId: deleteawsIntegration description: Delete a AWS integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: public_key: type: string private_key: type: string required: - public_key - private_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /integrations/azure: get: tags: - Integrations summary: List Azure integrations. operationId: listazureIntegrations description: List and search Azure integrations of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string format: uuid description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query - schema: type: array items: type: string format: uuid description: Filter by integration IDs required: false description: Filter by integration IDs name: ids in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by location IDs required: false description: Filter by location IDs name: locationIds in: query - schema: type: string description: Search term to filter integrations by name or description example: my integration required: false description: Search term to filter integrations by name or description name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration location: type: - object - 'null' properties: id: type: string format: uuid description: The location ID. name: type: string description: The name of the location. type: type: string description: The type of the location. enabled: type: boolean description: Whether the location is enabled. lastSeenAt: type: - string - 'null' description: The date and time the location agent last connected. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - id - name - type - enabled - links title: LocationSummarized description: The location of the integration kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - projects - location - kind - valid - validationErrors required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Integrations summary: Create Azure integrations. operationId: createazureIntegration description: Create a Azure integration. requestBody: content: application/json: schema: type: object properties: organizationId: type: string format: uuid description: The organization ID to create the integration for name: type: string description: The name of the integration parameters: type: object properties: client_id: type: string client_secret: type: string tenant_id: type: string subscription_id: type: string required: - client_id - client_secret - tenant_id description: The parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to create the integration for example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to create the integration for example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - name - parameters responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: client_id: type: string client_secret: type: string tenant_id: type: string subscription_id: type: string required: - client_id - client_secret - tenant_id description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /integrations/azure/{id}: get: tags: - Integrations summary: Get Azure integration. operationId: getazureIntegration description: Get a Azure integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: client_id: type: string client_secret: type: string tenant_id: type: string subscription_id: type: string required: - client_id - client_secret - tenant_id description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation put: tags: - Integrations summary: Update Azure integration. operationId: updateazureIntegration description: Update a Azure integration. parameters: - schema: type: string format: uuid description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The new name of the integration parameters: type: object properties: client_id: type: string client_secret: type: string tenant_id: type: string subscription_id: type: string required: - client_id - client_secret - tenant_id description: The new parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to attach to the integration example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to attach to the integration example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: client_id: type: string client_secret: type: string tenant_id: type: string subscription_id: type: string required: - client_id - client_secret - tenant_id description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation delete: tags: - Integrations summary: Delete Azure integration. operationId: deleteazureIntegration description: Delete a Azure integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: client_id: type: string client_secret: type: string tenant_id: type: string subscription_id: type: string required: - client_id - client_secret - tenant_id description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /integrations/bitbucket: get: tags: - Integrations summary: List Bitbucket integrations. operationId: listbitbucketIntegrations description: List and search Bitbucket integrations of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string format: uuid description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query - schema: type: array items: type: string format: uuid description: Filter by integration IDs required: false description: Filter by integration IDs name: ids in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by location IDs required: false description: Filter by location IDs name: locationIds in: query - schema: type: string description: Search term to filter integrations by name or description example: my integration required: false description: Search term to filter integrations by name or description name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration location: type: - object - 'null' properties: id: type: string format: uuid description: The location ID. name: type: string description: The name of the location. type: type: string description: The type of the location. enabled: type: boolean description: Whether the location is enabled. lastSeenAt: type: - string - 'null' description: The date and time the location agent last connected. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - id - name - type - enabled - links title: LocationSummarized description: The location of the integration kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - projects - location - kind - valid - validationErrors required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Integrations summary: Create Bitbucket integrations. operationId: createbitbucketIntegration description: Create a Bitbucket integration. requestBody: content: application/json: schema: type: object properties: organizationId: type: string format: uuid description: The organization ID to create the integration for name: type: string description: The name of the integration parameters: type: object properties: email: type: string api_key: type: string workspace_slug: type: string instance_url: type: - string - 'null' location_id: type: - string - 'null' required: - email - api_key - workspace_slug description: The parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to create the integration for example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to create the integration for example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - name - parameters responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: email: type: string api_key: type: string workspace_slug: type: string instance_url: type: - string - 'null' location_id: type: - string - 'null' required: - email - api_key - workspace_slug description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /integrations/bitbucket/{id}: get: tags: - Integrations summary: Get Bitbucket integration. operationId: getbitbucketIntegration description: Get a Bitbucket integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: email: type: string api_key: type: string workspace_slug: type: string instance_url: type: - string - 'null' location_id: type: - string - 'null' required: - email - api_key - workspace_slug description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation put: tags: - Integrations summary: Update Bitbucket integration. operationId: updatebitbucketIntegration description: Update a Bitbucket integration. parameters: - schema: type: string format: uuid description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The new name of the integration parameters: type: object properties: email: type: string api_key: type: string workspace_slug: type: string instance_url: type: - string - 'null' location_id: type: - string - 'null' required: - email - api_key - workspace_slug description: The new parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to attach to the integration example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to attach to the integration example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: email: type: string api_key: type: string workspace_slug: type: string instance_url: type: - string - 'null' location_id: type: - string - 'null' required: - email - api_key - workspace_slug description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation delete: tags: - Integrations summary: Delete Bitbucket integration. operationId: deletebitbucketIntegration description: Delete a Bitbucket integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: email: type: string api_key: type: string workspace_slug: type: string instance_url: type: - string - 'null' location_id: type: - string - 'null' required: - email - api_key - workspace_slug description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /integrations/cloudflare: get: tags: - Integrations summary: List Cloudflare integrations. operationId: listcloudflareIntegrations description: List and search Cloudflare integrations of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string format: uuid description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query - schema: type: array items: type: string format: uuid description: Filter by integration IDs required: false description: Filter by integration IDs name: ids in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by location IDs required: false description: Filter by location IDs name: locationIds in: query - schema: type: string description: Search term to filter integrations by name or description example: my integration required: false description: Search term to filter integrations by name or description name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration location: type: - object - 'null' properties: id: type: string format: uuid description: The location ID. name: type: string description: The name of the location. type: type: string description: The type of the location. enabled: type: boolean description: Whether the location is enabled. lastSeenAt: type: - string - 'null' description: The date and time the location agent last connected. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - id - name - type - enabled - links title: LocationSummarized description: The location of the integration kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - projects - location - kind - valid - validationErrors required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Integrations summary: Create Cloudflare integrations. operationId: createcloudflareIntegration description: Create a Cloudflare integration. requestBody: content: application/json: schema: type: object properties: organizationId: type: string format: uuid description: The organization ID to create the integration for name: type: string description: The name of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to create the integration for example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to create the integration for example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - name - parameters responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /integrations/cloudflare/{id}: get: tags: - Integrations summary: Get Cloudflare integration. operationId: getcloudflareIntegration description: Get a Cloudflare integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation put: tags: - Integrations summary: Update Cloudflare integration. operationId: updatecloudflareIntegration description: Update a Cloudflare integration. parameters: - schema: type: string format: uuid description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The new name of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The new parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to attach to the integration example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to attach to the integration example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation delete: tags: - Integrations summary: Delete Cloudflare integration. operationId: deletecloudflareIntegration description: Delete a Cloudflare integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /integrations/custom: get: tags: - Integrations summary: List Custom Integration integrations. operationId: listcustomIntegrations description: List and search Custom Integration integrations of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string format: uuid description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query - schema: type: array items: type: string format: uuid description: Filter by integration IDs required: false description: Filter by integration IDs name: ids in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by location IDs required: false description: Filter by location IDs name: locationIds in: query - schema: type: string description: Search term to filter integrations by name or description example: my integration required: false description: Search term to filter integrations by name or description name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration location: type: - object - 'null' properties: id: type: string format: uuid description: The location ID. name: type: string description: The name of the location. type: type: string description: The type of the location. enabled: type: boolean description: Whether the location is enabled. lastSeenAt: type: - string - 'null' description: The date and time the location agent last connected. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - id - name - type - enabled - links title: LocationSummarized description: The location of the integration kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - projects - location - kind - valid - validationErrors required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Integrations summary: Create Custom Integration integrations. operationId: createcustomIntegration description: Create a Custom Integration integration. requestBody: content: application/json: schema: type: object properties: organizationId: type: string format: uuid description: The organization ID to create the integration for name: type: string description: The name of the integration parameters: type: object properties: identifier: type: string parameters: {} required: - identifier description: The parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to create the integration for example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to create the integration for example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - name - parameters responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: identifier: type: string parameters: {} required: - identifier description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /integrations/custom/{id}: get: tags: - Integrations summary: Get Custom Integration integration. operationId: getcustomIntegration description: Get a Custom Integration integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: identifier: type: string parameters: {} required: - identifier description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation put: tags: - Integrations summary: Update Custom Integration integration. operationId: updatecustomIntegration description: Update a Custom Integration integration. parameters: - schema: type: string format: uuid description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The new name of the integration parameters: type: object properties: identifier: type: string parameters: {} required: - identifier description: The new parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to attach to the integration example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to attach to the integration example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: identifier: type: string parameters: {} required: - identifier description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation delete: tags: - Integrations summary: Delete Custom Integration integration. operationId: deletecustomIntegration description: Delete a Custom Integration integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: identifier: type: string parameters: {} required: - identifier description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /integrations/gcp: get: tags: - Integrations summary: List GCP integrations. operationId: listgcpIntegrations description: List and search GCP integrations of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string format: uuid description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query - schema: type: array items: type: string format: uuid description: Filter by integration IDs required: false description: Filter by integration IDs name: ids in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by location IDs required: false description: Filter by location IDs name: locationIds in: query - schema: type: string description: Search term to filter integrations by name or description example: my integration required: false description: Search term to filter integrations by name or description name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration location: type: - object - 'null' properties: id: type: string format: uuid description: The location ID. name: type: string description: The name of the location. type: type: string description: The type of the location. enabled: type: boolean description: Whether the location is enabled. lastSeenAt: type: - string - 'null' description: The date and time the location agent last connected. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - id - name - type - enabled - links title: LocationSummarized description: The location of the integration kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - projects - location - kind - valid - validationErrors required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Integrations summary: Create GCP integrations. operationId: creategcpIntegration description: Create a GCP integration. requestBody: content: application/json: schema: type: object properties: organizationId: type: string format: uuid description: The organization ID to create the integration for name: type: string description: The name of the integration parameters: type: object properties: auth_provider_x509_cert_url: type: string auth_uri: type: string client_email: type: string client_id: type: string client_x509_cert_url: type: string private_key: type: string private_key_id: type: string project_id: type: string projects: type: string token_uri: type: string type: type: string universe_domain: type: string required: - auth_provider_x509_cert_url - auth_uri - client_email - client_id - client_x509_cert_url - private_key - private_key_id - project_id - token_uri - type - universe_domain description: The parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to create the integration for example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to create the integration for example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - name - parameters responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: auth_provider_x509_cert_url: type: string auth_uri: type: string client_email: type: string client_id: type: string client_x509_cert_url: type: string private_key: type: string private_key_id: type: string project_id: type: string projects: type: string token_uri: type: string type: type: string universe_domain: type: string required: - auth_provider_x509_cert_url - auth_uri - client_email - client_id - client_x509_cert_url - private_key - private_key_id - project_id - token_uri - type - universe_domain description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /integrations/gcp/{id}: get: tags: - Integrations summary: Get GCP integration. operationId: getgcpIntegration description: Get a GCP integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: auth_provider_x509_cert_url: type: string auth_uri: type: string client_email: type: string client_id: type: string client_x509_cert_url: type: string private_key: type: string private_key_id: type: string project_id: type: string projects: type: string token_uri: type: string type: type: string universe_domain: type: string required: - auth_provider_x509_cert_url - auth_uri - client_email - client_id - client_x509_cert_url - private_key - private_key_id - project_id - token_uri - type - universe_domain description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation put: tags: - Integrations summary: Update GCP integration. operationId: updategcpIntegration description: Update a GCP integration. parameters: - schema: type: string format: uuid description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The new name of the integration parameters: type: object properties: auth_provider_x509_cert_url: type: string auth_uri: type: string client_email: type: string client_id: type: string client_x509_cert_url: type: string private_key: type: string private_key_id: type: string project_id: type: string projects: type: string token_uri: type: string type: type: string universe_domain: type: string required: - auth_provider_x509_cert_url - auth_uri - client_email - client_id - client_x509_cert_url - private_key - private_key_id - project_id - token_uri - type - universe_domain description: The new parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to attach to the integration example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to attach to the integration example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: auth_provider_x509_cert_url: type: string auth_uri: type: string client_email: type: string client_id: type: string client_x509_cert_url: type: string private_key: type: string private_key_id: type: string project_id: type: string projects: type: string token_uri: type: string type: type: string universe_domain: type: string required: - auth_provider_x509_cert_url - auth_uri - client_email - client_id - client_x509_cert_url - private_key - private_key_id - project_id - token_uri - type - universe_domain description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation delete: tags: - Integrations summary: Delete GCP integration. operationId: deletegcpIntegration description: Delete a GCP integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: auth_provider_x509_cert_url: type: string auth_uri: type: string client_email: type: string client_id: type: string client_x509_cert_url: type: string private_key: type: string private_key_id: type: string project_id: type: string projects: type: string token_uri: type: string type: type: string universe_domain: type: string required: - auth_provider_x509_cert_url - auth_uri - client_email - client_id - client_x509_cert_url - private_key - private_key_id - project_id - token_uri - type - universe_domain description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /integrations/github: get: tags: - Integrations summary: List GitHub integrations. operationId: listgithubIntegrations description: List and search GitHub integrations of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string format: uuid description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query - schema: type: array items: type: string format: uuid description: Filter by integration IDs required: false description: Filter by integration IDs name: ids in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by location IDs required: false description: Filter by location IDs name: locationIds in: query - schema: type: string description: Search term to filter integrations by name or description example: my integration required: false description: Search term to filter integrations by name or description name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration location: type: - object - 'null' properties: id: type: string format: uuid description: The location ID. name: type: string description: The name of the location. type: type: string description: The type of the location. enabled: type: boolean description: Whether the location is enabled. lastSeenAt: type: - string - 'null' description: The date and time the location agent last connected. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - id - name - type - enabled - links title: LocationSummarized description: The location of the integration kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - projects - location - kind - valid - validationErrors required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Integrations summary: Create GitHub integrations. operationId: creategithubIntegration description: Create a GitHub integration. requestBody: content: application/json: schema: type: object properties: organizationId: type: string format: uuid description: The organization ID to create the integration for name: type: string description: The name of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to create the integration for example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to create the integration for example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - name - parameters responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /integrations/github/{id}: get: tags: - Integrations summary: Get GitHub integration. operationId: getgithubIntegration description: Get a GitHub integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation put: tags: - Integrations summary: Update GitHub integration. operationId: updategithubIntegration description: Update a GitHub integration. parameters: - schema: type: string format: uuid description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The new name of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The new parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to attach to the integration example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to attach to the integration example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation delete: tags: - Integrations summary: Delete GitHub integration. operationId: deletegithubIntegration description: Delete a GitHub integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /integrations/gitlab: get: tags: - Integrations summary: List GitLab integrations. operationId: listgitlabIntegrations description: List and search GitLab integrations of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string format: uuid description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query - schema: type: array items: type: string format: uuid description: Filter by integration IDs required: false description: Filter by integration IDs name: ids in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by location IDs required: false description: Filter by location IDs name: locationIds in: query - schema: type: string description: Search term to filter integrations by name or description example: my integration required: false description: Search term to filter integrations by name or description name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration location: type: - object - 'null' properties: id: type: string format: uuid description: The location ID. name: type: string description: The name of the location. type: type: string description: The type of the location. enabled: type: boolean description: Whether the location is enabled. lastSeenAt: type: - string - 'null' description: The date and time the location agent last connected. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - id - name - type - enabled - links title: LocationSummarized description: The location of the integration kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - projects - location - kind - valid - validationErrors required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Integrations summary: Create GitLab integrations. operationId: creategitlabIntegration description: Create a GitLab integration. requestBody: content: application/json: schema: type: object properties: organizationId: type: string format: uuid description: The organization ID to create the integration for name: type: string description: The name of the integration parameters: type: object properties: api_key: type: string instance_url: type: string required: - api_key description: The parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to create the integration for example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to create the integration for example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - name - parameters responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string instance_url: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /integrations/gitlab/{id}: get: tags: - Integrations summary: Get GitLab integration. operationId: getgitlabIntegration description: Get a GitLab integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string instance_url: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation put: tags: - Integrations summary: Update GitLab integration. operationId: updategitlabIntegration description: Update a GitLab integration. parameters: - schema: type: string format: uuid description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The new name of the integration parameters: type: object properties: api_key: type: string instance_url: type: string required: - api_key description: The new parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to attach to the integration example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to attach to the integration example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string instance_url: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation delete: tags: - Integrations summary: Delete GitLab integration. operationId: deletegitlabIntegration description: Delete a GitLab integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string instance_url: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /integrations/jira: get: tags: - Integrations summary: List Jira integrations. operationId: listjiraIntegrations description: List and search Jira integrations of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string format: uuid description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query - schema: type: array items: type: string format: uuid description: Filter by integration IDs required: false description: Filter by integration IDs name: ids in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by location IDs required: false description: Filter by location IDs name: locationIds in: query - schema: type: string description: Search term to filter integrations by name or description example: my integration required: false description: Search term to filter integrations by name or description name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration location: type: - object - 'null' properties: id: type: string format: uuid description: The location ID. name: type: string description: The name of the location. type: type: string description: The type of the location. enabled: type: boolean description: Whether the location is enabled. lastSeenAt: type: - string - 'null' description: The date and time the location agent last connected. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - id - name - type - enabled - links title: LocationSummarized description: The location of the integration kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - projects - location - kind - valid - validationErrors required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Integrations summary: Create Jira integrations. operationId: createjiraIntegration description: Create a Jira integration. requestBody: content: application/json: schema: type: object properties: organizationId: type: string format: uuid description: The organization ID to create the integration for name: type: string description: The name of the integration parameters: type: object properties: name: type: string account_id: type: string instance_url: type: string auth_method: type: string enum: - cloud - server email: type: string api_key: type: string username: type: string password: type: string proxy_id: type: string templates: type: array items: type: object properties: name: type: string project_id: type: string issue_type: type: string properties_mapping: type: array items: type: object properties: name: type: string mapping: type: array items: type: object properties: escape_property: type: string enum: - severity - applicationName - context - testCategory - scanId - linkToEscape jira_property: type: string escape_option: type: string jira_option: type: string required: - escape_property - jira_property required: - name - mapping parent_key: type: string required: - name - project_id - issue_type required: - name - account_id - instance_url - auth_method description: The parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to create the integration for example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to create the integration for example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - name - parameters responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: name: type: string account_id: type: string instance_url: type: string auth_method: type: string enum: - cloud - server email: type: string api_key: type: string username: type: string password: type: string proxy_id: type: string templates: type: array items: type: object properties: name: type: string project_id: type: string issue_type: type: string properties_mapping: type: array items: type: object properties: name: type: string mapping: type: array items: type: object properties: escape_property: type: string enum: - severity - applicationName - context - testCategory - scanId - linkToEscape jira_property: type: string escape_option: type: string jira_option: type: string required: - escape_property - jira_property required: - name - mapping parent_key: type: string required: - name - project_id - issue_type required: - name - account_id - instance_url - auth_method description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /integrations/jira/{id}: get: tags: - Integrations summary: Get Jira integration. operationId: getjiraIntegration description: Get a Jira integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: name: type: string account_id: type: string instance_url: type: string auth_method: type: string enum: - cloud - server email: type: string api_key: type: string username: type: string password: type: string proxy_id: type: string templates: type: array items: type: object properties: name: type: string project_id: type: string issue_type: type: string properties_mapping: type: array items: type: object properties: name: type: string mapping: type: array items: type: object properties: escape_property: type: string enum: - severity - applicationName - context - testCategory - scanId - linkToEscape jira_property: type: string escape_option: type: string jira_option: type: string required: - escape_property - jira_property required: - name - mapping parent_key: type: string required: - name - project_id - issue_type required: - name - account_id - instance_url - auth_method description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation put: tags: - Integrations summary: Update Jira integration. operationId: updatejiraIntegration description: Update a Jira integration. parameters: - schema: type: string format: uuid description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The new name of the integration parameters: type: object properties: name: type: string account_id: type: string instance_url: type: string auth_method: type: string enum: - cloud - server email: type: string api_key: type: string username: type: string password: type: string proxy_id: type: string templates: type: array items: type: object properties: name: type: string project_id: type: string issue_type: type: string properties_mapping: type: array items: type: object properties: name: type: string mapping: type: array items: type: object properties: escape_property: type: string enum: - severity - applicationName - context - testCategory - scanId - linkToEscape jira_property: type: string escape_option: type: string jira_option: type: string required: - escape_property - jira_property required: - name - mapping parent_key: type: string required: - name - project_id - issue_type required: - name - account_id - instance_url - auth_method description: The new parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to attach to the integration example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to attach to the integration example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: name: type: string account_id: type: string instance_url: type: string auth_method: type: string enum: - cloud - server email: type: string api_key: type: string username: type: string password: type: string proxy_id: type: string templates: type: array items: type: object properties: name: type: string project_id: type: string issue_type: type: string properties_mapping: type: array items: type: object properties: name: type: string mapping: type: array items: type: object properties: escape_property: type: string enum: - severity - applicationName - context - testCategory - scanId - linkToEscape jira_property: type: string escape_option: type: string jira_option: type: string required: - escape_property - jira_property required: - name - mapping parent_key: type: string required: - name - project_id - issue_type required: - name - account_id - instance_url - auth_method description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation delete: tags: - Integrations summary: Delete Jira integration. operationId: deletejiraIntegration description: Delete a Jira integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: name: type: string account_id: type: string instance_url: type: string auth_method: type: string enum: - cloud - server email: type: string api_key: type: string username: type: string password: type: string proxy_id: type: string templates: type: array items: type: object properties: name: type: string project_id: type: string issue_type: type: string properties_mapping: type: array items: type: object properties: name: type: string mapping: type: array items: type: object properties: escape_property: type: string enum: - severity - applicationName - context - testCategory - scanId - linkToEscape jira_property: type: string escape_option: type: string jira_option: type: string required: - escape_property - jira_property required: - name - mapping parent_key: type: string required: - name - project_id - issue_type required: - name - account_id - instance_url - auth_method description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /integrations/kubernetes: get: tags: - Integrations summary: List Kubernetes integrations. operationId: listkubernetesIntegrations description: List and search Kubernetes integrations of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string format: uuid description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query - schema: type: array items: type: string format: uuid description: Filter by integration IDs required: false description: Filter by integration IDs name: ids in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by location IDs required: false description: Filter by location IDs name: locationIds in: query - schema: type: string description: Search term to filter integrations by name or description example: my integration required: false description: Search term to filter integrations by name or description name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration location: type: - object - 'null' properties: id: type: string format: uuid description: The location ID. name: type: string description: The name of the location. type: type: string description: The type of the location. enabled: type: boolean description: Whether the location is enabled. lastSeenAt: type: - string - 'null' description: The date and time the location agent last connected. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - id - name - type - enabled - links title: LocationSummarized description: The location of the integration kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - projects - location - kind - valid - validationErrors required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Integrations summary: Create Kubernetes integrations. operationId: createkubernetesIntegration description: Create a Kubernetes integration. requestBody: content: application/json: schema: type: object properties: organizationId: type: string format: uuid description: The organization ID to create the integration for name: type: string description: The name of the integration parameters: type: object properties: blacklist: type: - object - 'null' properties: namespaces: type: - array - 'null' items: type: string tags: type: - object - 'null' properties: labels: type: - array - 'null' items: type: string namespaces: type: - boolean - 'null' description: The parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to create the integration for example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to create the integration for example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - name - parameters responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: blacklist: type: - object - 'null' properties: namespaces: type: - array - 'null' items: type: string tags: type: - object - 'null' properties: labels: type: - array - 'null' items: type: string namespaces: type: - boolean - 'null' description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /integrations/kubernetes/{id}: get: tags: - Integrations summary: Get Kubernetes integration. operationId: getkubernetesIntegration description: Get a Kubernetes integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: blacklist: type: - object - 'null' properties: namespaces: type: - array - 'null' items: type: string tags: type: - object - 'null' properties: labels: type: - array - 'null' items: type: string namespaces: type: - boolean - 'null' description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation put: tags: - Integrations summary: Update Kubernetes integration. operationId: updatekubernetesIntegration description: Update a Kubernetes integration. parameters: - schema: type: string format: uuid description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The new name of the integration parameters: type: object properties: blacklist: type: - object - 'null' properties: namespaces: type: - array - 'null' items: type: string tags: type: - object - 'null' properties: labels: type: - array - 'null' items: type: string namespaces: type: - boolean - 'null' description: The new parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to attach to the integration example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to attach to the integration example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: blacklist: type: - object - 'null' properties: namespaces: type: - array - 'null' items: type: string tags: type: - object - 'null' properties: labels: type: - array - 'null' items: type: string namespaces: type: - boolean - 'null' description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation delete: tags: - Integrations summary: Delete Kubernetes integration. operationId: deletekubernetesIntegration description: Delete a Kubernetes integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: blacklist: type: - object - 'null' properties: namespaces: type: - array - 'null' items: type: string tags: type: - object - 'null' properties: labels: type: - array - 'null' items: type: string namespaces: type: - boolean - 'null' description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /integrations/postman: get: tags: - Integrations summary: List Postman integrations. operationId: listpostmanIntegrations description: List and search Postman integrations of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string format: uuid description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query - schema: type: array items: type: string format: uuid description: Filter by integration IDs required: false description: Filter by integration IDs name: ids in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by location IDs required: false description: Filter by location IDs name: locationIds in: query - schema: type: string description: Search term to filter integrations by name or description example: my integration required: false description: Search term to filter integrations by name or description name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration location: type: - object - 'null' properties: id: type: string format: uuid description: The location ID. name: type: string description: The name of the location. type: type: string description: The type of the location. enabled: type: boolean description: Whether the location is enabled. lastSeenAt: type: - string - 'null' description: The date and time the location agent last connected. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - id - name - type - enabled - links title: LocationSummarized description: The location of the integration kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - projects - location - kind - valid - validationErrors required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Integrations summary: Create Postman integrations. operationId: createpostmanIntegration description: Create a Postman integration. requestBody: content: application/json: schema: type: object properties: organizationId: type: string format: uuid description: The organization ID to create the integration for name: type: string description: The name of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to create the integration for example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to create the integration for example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - name - parameters responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /integrations/postman/{id}: get: tags: - Integrations summary: Get Postman integration. operationId: getpostmanIntegration description: Get a Postman integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation put: tags: - Integrations summary: Update Postman integration. operationId: updatepostmanIntegration description: Update a Postman integration. parameters: - schema: type: string format: uuid description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The new name of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The new parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to attach to the integration example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to attach to the integration example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation delete: tags: - Integrations summary: Delete Postman integration. operationId: deletepostmanIntegration description: Delete a Postman integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: api_key: type: string required: - api_key description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /integrations/wiz: get: tags: - Integrations summary: List Wiz integrations. operationId: listwizIntegrations description: List and search Wiz integrations of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string format: uuid description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query - schema: type: array items: type: string format: uuid description: Filter by integration IDs required: false description: Filter by integration IDs name: ids in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by location IDs required: false description: Filter by location IDs name: locationIds in: query - schema: type: string description: Search term to filter integrations by name or description example: my integration required: false description: Search term to filter integrations by name or description name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration location: type: - object - 'null' properties: id: type: string format: uuid description: The location ID. name: type: string description: The name of the location. type: type: string description: The type of the location. enabled: type: boolean description: Whether the location is enabled. lastSeenAt: type: - string - 'null' description: The date and time the location agent last connected. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - id - name - type - enabled - links title: LocationSummarized description: The location of the integration kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - projects - location - kind - valid - validationErrors required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Integrations summary: Create Wiz integrations. operationId: createwizIntegration description: Create a Wiz integration. requestBody: content: application/json: schema: type: object properties: organizationId: type: string format: uuid description: The organization ID to create the integration for name: type: string description: The name of the integration parameters: type: object properties: client_id: type: string client_secret: type: string token_uri: type: string api_endpoint: type: string upload_severity_levels: type: - array - 'null' items: type: string enum: - None - Low - Medium - High - Critical required: - client_id - client_secret - token_uri - api_endpoint description: The parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to create the integration for example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to create the integration for example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - name - parameters responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: client_id: type: string client_secret: type: string token_uri: type: string api_endpoint: type: string upload_severity_levels: type: - array - 'null' items: type: string enum: - None - Low - Medium - High - Critical required: - client_id - client_secret - token_uri - api_endpoint description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /integrations/wiz/{id}: get: tags: - Integrations summary: Get Wiz integration. operationId: getwizIntegration description: Get a Wiz integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: client_id: type: string client_secret: type: string token_uri: type: string api_endpoint: type: string upload_severity_levels: type: - array - 'null' items: type: string enum: - None - Low - Medium - High - Critical required: - client_id - client_secret - token_uri - api_endpoint description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation put: tags: - Integrations summary: Update Wiz integration. operationId: updatewizIntegration description: Update a Wiz integration. parameters: - schema: type: string format: uuid description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The new name of the integration parameters: type: object properties: client_id: type: string client_secret: type: string token_uri: type: string api_endpoint: type: string upload_severity_levels: type: - array - 'null' items: type: string enum: - None - Low - Medium - High - Critical required: - client_id - client_secret - token_uri - api_endpoint description: The new parameters of the integration proxyId: type: string format: uuid description: Optional proxy ID to attach to the integration example: 00000000-0000-0000-0000-000000000000 projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to attach to the integration example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: client_id: type: string client_secret: type: string token_uri: type: string api_endpoint: type: string upload_severity_levels: type: - array - 'null' items: type: string enum: - None - Low - Medium - High - Critical required: - client_id - client_secret - token_uri - api_endpoint description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation delete: tags: - Integrations summary: Delete Wiz integration. operationId: deletewizIntegration description: Delete a Wiz integration. parameters: - schema: type: string description: The integration ID example: 00000000-0000-0000-0000-000000000000 required: true description: The integration ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the integration name: type: string description: The name of the integration createdAt: type: string format: date-time description: The date and time the integration was created updatedAt: type: string format: date-time description: The date and time the integration was last updated scheduledForDeletionAt: type: - string - 'null' format: date-time description: The date and time the integration is scheduled for deletion lastPullWorkflowAt: type: - string - 'null' format: date-time description: The date and time the last pull workflow was executed kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ description: The kind of the integration valid: type: boolean description: Whether the integration is valid validationErrors: type: array items: type: string description: The validation errors of the integration organizationId: type: string format: uuid description: The id of the organization the integration belongs to projects: type: array items: type: object properties: id: type: string format: uuid description: The id of the project name: type: string description: The name of the project createdAt: type: string format: date-time description: The date and time the project was created bindings: type: array items: type: object properties: id: type: string format: uuid description: The id of the role binding createdAt: type: string format: date-time description: The date and time the role binding was created roleId: type: string format: uuid description: The id of the role bound by the role binding projectId: type: - string - 'null' format: uuid description: The id of the project bound by the role binding userId: type: string format: uuid description: The id of the user bound by the role binding required: - id - createdAt - roleId - userId description: The bindings of the project required: - id - name - createdAt - bindings description: The projects of the integration parameters: type: object properties: client_id: type: string client_secret: type: string token_uri: type: string api_endpoint: type: string upload_severity_levels: type: - array - 'null' items: type: string enum: - None - Low - Medium - High - Critical required: - client_id - client_secret - token_uri - api_endpoint description: The parameters of the integration location: type: - object - 'null' properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The location ID. name: type: string default: Location Name description: The name of the location. type: type: string default: Location Type description: The type of the location. enabled: type: boolean default: true description: Whether the location is enabled. createdAt: type: string default: '2021-01-01T00:00:00Z' description: The date and time the location was created. lastSeenAt: type: - string - 'null' default: '2021-01-01T00:00:00Z' description: The date and time the location was last seen. links: type: object properties: locationOverview: type: string description: The URL of the location overview. required: - locationOverview required: - links title: LocationDetailed description: The location of the integration required: - id - name - createdAt - updatedAt - scheduledForDeletionAt - lastPullWorkflowAt - kind - valid - validationErrors - organizationId - projects - parameters - location '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /workflows: get: tags: - Workflows summary: List workflows. operationId: listWorkflows description: List and search workflows of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - CREATED_AT - NAME description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: type: array items: type: string format: uuid description: Filter by workflow IDs required: false description: Filter by workflow IDs name: workflowIds in: query - schema: type: array items: type: string format: uuid description: Filter by project IDs required: false description: Filter by project IDs name: projectIds in: query - schema: type: array items: type: string format: uuid description: Filter by integration IDs required: false description: Filter by integration IDs name: integrationIds in: query - schema: type: array items: type: string enum: - ASSET_FOUND - ASSET_UPDATED - INTEGRATION_FAILED - ISSUE_UPDATED - LOCATION_DOWN - MANUAL - NEW_ISSUE - SCAN_COMPLETED - SCAN_FAILED - SCAN_STARTED description: Filter by triggers required: false description: Filter by triggers name: triggers in: query - schema: type: string description: Search term to filter integrations by name or description example: my integration required: false description: Search term to filter integrations by name or description name: search in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The workflow ID. name: type: string default: Workflow Name description: The name of the workflow. trigger: type: string enum: - ASSET_FOUND - ASSET_UPDATED - INTEGRATION_FAILED - ISSUE_UPDATED - LOCATION_DOWN - MANUAL - NEW_ISSUE - SCAN_COMPLETED - SCAN_FAILED - SCAN_STARTED throttleMs: type: - number - 'null' description: The throttle in milliseconds for the workflow. filters: type: array items: type: object properties: id: type: string format: uuid type: type: string enum: - ASSETS - EVENTS - INTEGRATIONS - ISSUES - LOCATIONS - PROFILES - SCANS filter: {} view: type: - object - 'null' properties: id: type: string format: uuid name: type: string target: type: string enum: - ASSETS - EVENTS - INTEGRATIONS - ISSUES - LOCATIONS - PROFILES - SCANS data: {} required: - id - name - target required: - id - type - view actions: type: array items: type: object properties: id: type: string format: uuid type: type: string enum: - ACT - EXPORT - NOTIFY parameters: {} internalAction: type: - string - 'null' enum: - UPDATE_ASSET - UPDATE_ISSUE - null integration: type: - object - 'null' properties: id: type: string format: uuid name: type: string kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ required: - id - name - kind required: - id - type - internalAction - integration required: - trigger - throttleMs - filters - actions title: WorkflowSummarized description: Summarized information about a workflow required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied post: tags: - Workflows summary: Create workflows. operationId: createWorkflow description: Create a workflow. requestBody: content: application/json: schema: type: object properties: organizationId: type: string format: uuid description: The organization ID to create the workflow for name: type: string description: The name of the workflow trigger: type: string enum: - ASSET_FOUND - ASSET_UPDATED - INTEGRATION_FAILED - ISSUE_UPDATED - LOCATION_DOWN - MANUAL - NEW_ISSUE - SCAN_COMPLETED - SCAN_FAILED - SCAN_STARTED throttleMs: type: - number - 'null' description: The throttle in milliseconds for the workflow. filters: type: array items: anyOf: - type: object properties: viewId: type: string format: uuid required: - viewId title: Create workflow filter using view - type: object properties: type: type: string enum: - ISSUES filter: type: object properties: severities: type: - array - 'null' items: type: string enum: - INFO - LOW - MEDIUM - HIGH - CRITICAL risks: type: - array - 'null' items: type: string enum: - UNAUTHENTICATED - SENSITIVE_DATA - CRITICAL_FINDING - PROD_ONLY_MODE - EXPOSED - OPEN_SCHEMA - PRIVATE projectIds: type: - array - 'null' items: type: string applicationIds: type: - array - 'null' items: type: string description: Deprecated, use profileIds instead profileIds: type: - array - 'null' items: type: string assetIds: type: - array - 'null' items: type: string jiraTicket: type: - boolean - 'null' search: type: - string - 'null' categories: type: - array - 'null' items: type: string enum: - ACCESS_CONTROL - CONFIGURATION - INFORMATION_DISCLOSURE - SENSITIVE_DATA - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SCHEMA - CUSTOM scannerKinds: type: - array - 'null' items: type: string enum: - FRONTEND_DAST - BLST_REST - BLST_GRAPHQL - ASM_DNS - ASM_IPV4 - ASM_IPV6 - ASM_IPV4_RANGE - ASM_REST - ASM_GRAPHQL - ASM_WEBAPP - ASM_GRPC - ASM_WEBSOCKET - ASM_MCP - ASM_SOAP - ASM_AWS_ACCOUNT - AUTOMATED_PENTEST_WEBAPP - AUTOMATED_PENTEST_REST - AUTOMATED_PENTEST_GRAPHQL - ASM_AKAMAI_ACCOUNT - ASM_CLOUDFLARE_ACCOUNT - ASM_GCP_PROJECT - ASM_KUBERNETES_CLUSTER - ASM_AZURE_TENANT - ASM_WIZ_ACCOUNT - ASM_POSTMAN_ORGANIZATION - ASM_GITLAB_REPOSITORY - ASM_GITHUB_REPOSITORY - ASM_BITBUCKET_REPOSITORY - ASM_GITLAB_GROUP - ASM_GITHUB_ORGANIZATION - ASM_BITBUCKET_ORGANIZATION - ASM_GRAPHQL_SCHEMA - ASM_OPENAPI - ASM_POSTMAN_COLLECTION - ASM_POSTMAN_ENVIRONMENT - ASM_WP_JSON - ASM_INSOMNIA - ASM_BURPSUITE_EXPORT - ASM_HAR_EXPORT - ASM_CODE_PROJECT - ASM_AWS_LAMBDA - ASM_PACKAGE - ASM_SOFTWARE assetClasses: type: - array - 'null' items: type: string enum: - API_SERVICE - FRONTEND - HOST - CLOUD_HOSTING - CDN - CSPM - DEV_TOOLS - NETWORK - REPOSITORY - SOURCE_CODE_MANAGEMENT - SCHEMA - CODE_PROJECT - CLOUD_COMPONENT - TECHNOLOGY assetTypes: type: - array - 'null' items: type: string enum: - DNS - IPV4 - IPV6 - IPV4_RANGE - REST - GRAPHQL - WEBAPP - GRPC - MCP - WEBSOCKET - SOAP - AWS_ACCOUNT - AKAMAI_ACCOUNT - CLOUDFLARE_ACCOUNT - GCP_PROJECT - KUBERNETES_CLUSTER - AZURE_TENANT - WIZ_ACCOUNT - POSTMAN_ORGANIZATION - GITLAB_REPOSITORY - GITHUB_REPOSITORY - BITBUCKET_REPOSITORY - GITLAB_GROUP - GITHUB_ORGANIZATION - BITBUCKET_ORGANIZATION - GRAPHQL_SCHEMA - OPENAPI - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - WP_JSON - INSOMNIA - BURPSUITE_EXPORT - HAR_EXPORT - CODE_PROJECT - AWS_LAMBDA - PACKAGE - SOFTWARE tagIds: type: - array - 'null' items: type: string noTags: type: - boolean - 'null' scanIds: type: - array - 'null' items: type: string securityTestUids: type: - array - 'null' items: type: string status: type: - array - 'null' items: type: string enum: - OPEN - RESOLVED - MANUAL_REVIEW - IGNORED - FALSE_POSITIVE ids: type: - array - 'null' items: type: string blacklistedIds: type: - array - 'null' items: type: string fullNames: type: - array - 'null' items: type: string blacklistedNames: type: - array - 'null' items: type: string assetStatuses: type: - array - 'null' items: type: string enum: - DEPRECATED - OUT_OF_SCOPE - FALSE_POSITIVE - MONITORED - THIRD_PARTY aiFalsePositive: type: - boolean - 'null' agentic: type: - boolean - 'null' targetIds: type: - array - 'null' items: type: string domains: type: - array - 'null' items: type: string ignoreInventory: type: - boolean - 'null' ignored: type: - boolean - 'null' required: - type - filter title: Create workflow filter using custom filter on issues - type: object properties: type: type: string enum: - PROFILES filter: type: object properties: ids: type: - array - 'null' items: type: string search: type: - string - 'null' risks: type: - array - 'null' items: type: string enum: - UNAUTHENTICATED - SENSITIVE_DATA - CRITICAL_FINDING - PROD_ONLY_MODE - EXPOSED - OPEN_SCHEMA - PRIVATE tagIds: type: - array - 'null' items: type: string noTags: type: - boolean - 'null' projectIds: type: - array - 'null' items: type: string noProjects: type: - boolean - 'null' assetIds: type: - array - 'null' items: type: string assetSchemaIds: type: - array - 'null' items: type: string issueIds: type: - array - 'null' items: type: string kinds: type: - array - 'null' items: type: string enum: - FRONTEND_DAST - BLST_REST - BLST_GRAPHQL - ASM_DNS - ASM_IPV4 - ASM_IPV6 - ASM_IPV4_RANGE - ASM_REST - ASM_GRAPHQL - ASM_WEBAPP - ASM_GRPC - ASM_WEBSOCKET - ASM_MCP - ASM_SOAP - ASM_AWS_ACCOUNT - AUTOMATED_PENTEST_WEBAPP - AUTOMATED_PENTEST_REST - AUTOMATED_PENTEST_GRAPHQL - ASM_AKAMAI_ACCOUNT - ASM_CLOUDFLARE_ACCOUNT - ASM_GCP_PROJECT - ASM_KUBERNETES_CLUSTER - ASM_AZURE_TENANT - ASM_WIZ_ACCOUNT - ASM_POSTMAN_ORGANIZATION - ASM_GITLAB_REPOSITORY - ASM_GITHUB_REPOSITORY - ASM_BITBUCKET_REPOSITORY - ASM_GITLAB_GROUP - ASM_GITHUB_ORGANIZATION - ASM_BITBUCKET_ORGANIZATION - ASM_GRAPHQL_SCHEMA - ASM_OPENAPI - ASM_POSTMAN_COLLECTION - ASM_POSTMAN_ENVIRONMENT - ASM_WP_JSON - ASM_INSOMNIA - ASM_BURPSUITE_EXPORT - ASM_HAR_EXPORT - ASM_CODE_PROJECT - ASM_AWS_LAMBDA - ASM_PACKAGE - ASM_SOFTWARE domains: type: - array - 'null' items: type: string initiators: type: - array - 'null' items: type: string enum: - APPLICATION_CREATION - CI - MANUAL - SCHEDULED - INVENTORY - UNKNOWN lastScanStatuses: type: - array - 'null' items: type: string enum: - STARTING - RUNNING - CANCELED - FINISHED - FAILED problemSeverities: type: - array - 'null' items: type: string enum: - INFO - WARNING - ERROR problemCodes: type: - array - 'null' items: type: string enum: - PL_FAILURE - AUTH_FAILURE - CONFIGURATION_IMPROVEMENT - SCHEMA_IMPROVEMENT - HIGH_NUMBER_OF_ERROR_ENDPOINTS - UNREACHABLE_ASSET - TIMEOUT - INTEGRATION_ERROR - CAPTCHA_HIT - BLOCKED_BY_WAF - RATE_LIMIT_EXCEEDED - NO_SCHEMA_FOUND - NO_AUTHENTICATION_CONFIGURED assetClasses: type: - array - 'null' items: type: string enum: - API_SERVICE - FRONTEND - HOST - CLOUD_HOSTING - CDN - CSPM - DEV_TOOLS - NETWORK - REPOSITORY - SOURCE_CODE_MANAGEMENT - SCHEMA - CODE_PROJECT - CLOUD_COMPONENT - TECHNOLOGY assetStatuses: type: - array - 'null' items: type: string enum: - DEPRECATED - OUT_OF_SCOPE - FALSE_POSITIVE - MONITORED - THIRD_PARTY assetTypes: type: - array - 'null' items: type: string enum: - DNS - IPV4 - IPV6 - IPV4_RANGE - REST - GRAPHQL - WEBAPP - GRPC - MCP - WEBSOCKET - SOAP - AWS_ACCOUNT - AKAMAI_ACCOUNT - CLOUDFLARE_ACCOUNT - GCP_PROJECT - KUBERNETES_CLUSTER - AZURE_TENANT - WIZ_ACCOUNT - POSTMAN_ORGANIZATION - GITLAB_REPOSITORY - GITHUB_REPOSITORY - BITBUCKET_REPOSITORY - GITLAB_GROUP - GITHUB_ORGANIZATION - BITBUCKET_ORGANIZATION - GRAPHQL_SCHEMA - OPENAPI - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - WP_JSON - INSOMNIA - BURPSUITE_EXPORT - HAR_EXPORT - CODE_PROJECT - AWS_LAMBDA - PACKAGE - SOFTWARE scanIds: type: - array - 'null' items: type: string required: - type - filter title: Create workflow filter using custom filter on profiles - type: object properties: type: type: string enum: - ASSETS filter: type: object properties: search: type: - string - 'null' risks: type: - array - 'null' items: type: string enum: - UNAUTHENTICATED - SENSITIVE_DATA - CRITICAL_FINDING - PROD_ONLY_MODE - EXPOSED - OPEN_SCHEMA - PRIVATE tagIds: type: - array - 'null' items: type: string exactTagIds: type: - array - 'null' items: type: string noTags: type: - boolean - 'null' integrationIds: type: - array - 'null' items: type: string types: type: - array - 'null' items: type: string enum: - DNS - IPV4 - IPV6 - IPV4_RANGE - REST - GRAPHQL - WEBAPP - GRPC - MCP - WEBSOCKET - SOAP - AWS_ACCOUNT - AKAMAI_ACCOUNT - CLOUDFLARE_ACCOUNT - GCP_PROJECT - KUBERNETES_CLUSTER - AZURE_TENANT - WIZ_ACCOUNT - POSTMAN_ORGANIZATION - GITLAB_REPOSITORY - GITHUB_REPOSITORY - BITBUCKET_REPOSITORY - GITLAB_GROUP - GITHUB_ORGANIZATION - BITBUCKET_ORGANIZATION - GRAPHQL_SCHEMA - OPENAPI - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - WP_JSON - INSOMNIA - BURPSUITE_EXPORT - HAR_EXPORT - CODE_PROJECT - AWS_LAMBDA - PACKAGE - SOFTWARE excludeTypes: type: - array - 'null' items: type: string enum: - DNS - IPV4 - IPV6 - IPV4_RANGE - REST - GRAPHQL - WEBAPP - GRPC - MCP - WEBSOCKET - SOAP - AWS_ACCOUNT - AKAMAI_ACCOUNT - CLOUDFLARE_ACCOUNT - GCP_PROJECT - KUBERNETES_CLUSTER - AZURE_TENANT - WIZ_ACCOUNT - POSTMAN_ORGANIZATION - GITLAB_REPOSITORY - GITHUB_REPOSITORY - BITBUCKET_REPOSITORY - GITLAB_GROUP - GITHUB_ORGANIZATION - BITBUCKET_ORGANIZATION - GRAPHQL_SCHEMA - OPENAPI - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - WP_JSON - INSOMNIA - BURPSUITE_EXPORT - HAR_EXPORT - CODE_PROJECT - AWS_LAMBDA - PACKAGE - SOFTWARE classes: type: - array - 'null' items: type: string enum: - API_SERVICE - FRONTEND - HOST - CLOUD_HOSTING - CDN - CSPM - DEV_TOOLS - NETWORK - REPOSITORY - SOURCE_CODE_MANAGEMENT - SCHEMA - CODE_PROJECT - CLOUD_COMPONENT - TECHNOLOGY excludeClasses: type: - array - 'null' items: type: string enum: - API_SERVICE - FRONTEND - HOST - CLOUD_HOSTING - CDN - CSPM - DEV_TOOLS - NETWORK - REPOSITORY - SOURCE_CODE_MANAGEMENT - SCHEMA - CODE_PROJECT - CLOUD_COMPONENT - TECHNOLOGY projectIds: type: - array - 'null' items: type: string exactProjectIds: type: - array - 'null' items: type: string noProjects: type: - boolean - 'null' applicationIds: type: - array - 'null' items: type: string foundByProfileIds: type: - array - 'null' items: type: string foundByIntegrationIds: type: - array - 'null' items: type: string scanIds: type: - array - 'null' items: type: string scannerKinds: type: - array - 'null' items: type: string enum: - FRONTEND_DAST - BLST_REST - BLST_GRAPHQL - ASM_DNS - ASM_IPV4 - ASM_IPV6 - ASM_IPV4_RANGE - ASM_REST - ASM_GRAPHQL - ASM_WEBAPP - ASM_GRPC - ASM_WEBSOCKET - ASM_MCP - ASM_SOAP - ASM_AWS_ACCOUNT - AUTOMATED_PENTEST_WEBAPP - AUTOMATED_PENTEST_REST - AUTOMATED_PENTEST_GRAPHQL - ASM_AKAMAI_ACCOUNT - ASM_CLOUDFLARE_ACCOUNT - ASM_GCP_PROJECT - ASM_KUBERNETES_CLUSTER - ASM_AZURE_TENANT - ASM_WIZ_ACCOUNT - ASM_POSTMAN_ORGANIZATION - ASM_GITLAB_REPOSITORY - ASM_GITHUB_REPOSITORY - ASM_BITBUCKET_REPOSITORY - ASM_GITLAB_GROUP - ASM_GITHUB_ORGANIZATION - ASM_BITBUCKET_ORGANIZATION - ASM_GRAPHQL_SCHEMA - ASM_OPENAPI - ASM_POSTMAN_COLLECTION - ASM_POSTMAN_ENVIRONMENT - ASM_WP_JSON - ASM_INSOMNIA - ASM_BURPSUITE_EXPORT - ASM_HAR_EXPORT - ASM_CODE_PROJECT - ASM_AWS_LAMBDA - ASM_PACKAGE - ASM_SOFTWARE workflowIds: type: - array - 'null' items: type: string domains: type: - array - 'null' items: type: string environments: type: - array - 'null' items: type: string enum: - UNKNOWN - DEVELOPMENT - STAGING - PRODUCTION cloudProviders: type: - array - 'null' items: type: string enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - VERCEL - UNKNOWN wafProviders: type: - array - 'null' items: type: string enum: - UNKNOWN - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - YUNJIASU - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - WP_CERBER_SECURITY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - ACE_XML_GATEWAY - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FIREPASS - TRAFFICSHIELD - FASTLY - FORTIWEB - AZURE_FRONT_DOOR - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - DATAPOWER - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KS_WAF - KONA_SITEDEFENDER - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - DATADOME - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - APPWALL - REBLAZE - RSFIREWALL - ASP_NET_WAF - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURE_ENTRY - EEYE_SECUREIIS - SECURESPHERE - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - UTM_WEB_PROTECTION - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRANSIP_WEB_FIREWALL - UEWAF - URLMASTER_SECURITYCHECK - URLSCAN - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - RAYWAF - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNSUO - YXLINK - ZENEDGE - ZSCALER captchaProviders: type: - array - 'null' items: type: string enum: - RECAPTCHA - HCAPTCHA - CLOUDFLARE_TURNSTILE - GEETEST - FRIENDLY_CAPTCHA - AWS_WAF_CAPTCHA - MTCAPTCHA - YANDEX_SMARTCAPTCHA - ARCAPTCHA - ALTCHA - FUNCAPTCHA - SLIDER_CAPTCHA - PICATCHA - SNAPHOST - STARTEST - ADCAPTCHA - V4GUARD_CHECKPOINT - COINHIVE_CAPTCHA - RINGCAPTCHA - REALLY_SIMPLE_CAPTCHA - OTHER statuses: type: - array - 'null' items: type: string enum: - DEPRECATED - OUT_OF_SCOPE - FALSE_POSITIVE - MONITORED - THIRD_PARTY severities: type: - array - 'null' items: type: string enum: - INFO - LOW - MEDIUM - HIGH - CRITICAL parentLinks: type: - array - 'null' items: type: object properties: parentId: type: - string - 'null' verb: type: string enum: - FINDS - DEFINES - DEFINES_FAVORITE - IS_SOURCE - CONTAINS - USES required: - verb childrenLinks: type: - array - 'null' items: type: object properties: childId: type: - string - 'null' verb: type: string enum: - FINDS - DEFINES - DEFINES_FAVORITE - IS_SOURCE - CONTAINS - USES required: - verb schemaIds: type: - array - 'null' items: type: string assetIds: type: - array - 'null' items: type: string blacklistAssetIds: type: - array - 'null' items: type: string manuallyCreated: type: - boolean - 'null' sources: type: - array - 'null' items: type: object properties: manuallyCreated: type: - boolean - 'null' integrationId: type: - string - 'null' assetId: type: - string - 'null' visibility: type: - array - 'null' items: type: string enum: - PRIVATE - INTERNAL - PUBLIC ports: type: - array - 'null' items: type: number frameworks: type: - array - 'null' items: type: string enum: - UNKNOWN - REST_DJANGO - REST_FLASK - REST_FASTAPI - REST_EXPRESS_JS - REST_SPRING_BOOT - REST_RUBY_ON_RAILS - REST_ASP_NET - REST_LARAVEL - REST_NESTJS - REST_SCALA_PLAY - REST_CLOJURE - REST_SYMFONY - REST_GIN - REST_HONO - REST_NEXTJS - REST_NUXTJS - GRAPHQL_APOLLO - GRAPHQL_GRAPHQLYOGA - FRONTEND_REACT - FRONTEND_VUE - FRONTEND_ANGULAR - FRONTEND_SVELTE - FRONTEND_JQUERY - FRONTEND_JAVASCRIPT - FRONTEND_DJANGO prioritizeFavorites: type: - boolean - 'null' languages: type: - array - 'null' items: type: string ownerEmails: type: - array - 'null' items: type: string uris: type: - array - 'null' items: type: string technologyKeys: type: - array - 'null' items: type: string ownTechnologyKeys: type: - array - 'null' items: type: string required: - type - filter title: Create workflow filter using custom filter on assets actions: type: array items: anyOf: - type: object properties: type: type: string enum: - EXPORT parameters: type: object properties: url: type: string format: type: string enum: - json - xml required: - url - format integrationKind: type: string enum: - WEBHOOK required: - type - parameters - integrationKind title: Create Export workflow action using Webhook - type: object properties: type: type: string enum: - EXPORT parameters: type: object properties: projectId: type: string issueType: type: string propertiesMapping: type: array items: oneOf: - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.severity required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.createdAt required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.name required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.category required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.context required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.status required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.remediation required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.targets required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.linkInAllIssues required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.linkInAsset required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.linkInScan required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.linkInProfile required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - profile.name required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - profile.scannerKind required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - asset.name required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - asset.url required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - asset.tags required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - asset.externalUrl required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - asset.type required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - asset.class required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - customRule.name required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - customRule.link required: - jiraPropertyId - map - field staticPropertiesMapping: type: array items: type: object properties: jiraPropertyId: type: string value: anyOf: - type: string - type: array items: type: string - type: 'null' append: type: boolean default: false required: - jiraPropertyId - value default: [] parentKey: type: - string - 'null' default: null disableDefaultMappings: type: - boolean - 'null' required: - projectId - issueType - propertiesMapping integrationKind: type: string enum: - JIRA integrationId: type: string format: uuid required: - type - parameters - integrationKind - integrationId title: Create Export workflow action using Jira - type: object properties: type: type: string enum: - EXPORT parameters: type: object properties: minSeverity: type: - string - 'null' enum: - INFO - LOW - MEDIUM - HIGH - CRITICAL - null description: The minimum severity of the issues to export required: - minSeverity integrationKind: type: string enum: - WIZ required: - type - parameters - integrationKind title: Create Export workflow action using Wiz - type: object properties: type: type: string enum: - NOTIFY parameters: type: object properties: to: oneOf: - type: object properties: type: type: string enum: - emails emails: type: array items: type: string required: - type - emails - type: object properties: type: type: string enum: - roles global: type: boolean description: Send the notification to global holders of the role projectIds: type: array items: type: string format: uuid description: Send the notification to holders of the role in the projects roles: type: array items: type: string format: uuid required: - type - global - projectIds - roles - type: object properties: type: type: string enum: - owners required: - type - type: object properties: type: type: string enum: - projectMembers required: - type - type: object properties: type: type: string enum: - organizationAdmins required: - type required: - to integrationKind: type: string enum: - EMAIL required: - type - parameters - integrationKind title: Create Notify workflow action using Email - type: object properties: type: type: string enum: - NOTIFY parameters: type: object properties: url: type: string required: - url integrationKind: type: string enum: - SLACK_WEBHOOK required: - type - parameters - integrationKind title: Create Notify workflow action using Slack - type: object properties: type: type: string enum: - NOTIFY parameters: type: object properties: url: type: string required: - url integrationKind: type: string enum: - DISCORD_WEBHOOK required: - type - parameters - integrationKind title: Create Notify workflow action using Discord - type: object properties: type: type: string enum: - NOTIFY parameters: type: object properties: url: type: string required: - url integrationKind: type: string enum: - TEAMS_WEBHOOK required: - type - parameters - integrationKind title: Create Notify workflow action using Teams projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to create the integration for example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - organizationId - name - trigger - throttleMs - filters - actions responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The workflow ID. name: type: string default: Workflow Name description: The name of the workflow. trigger: type: string enum: - ASSET_FOUND - ASSET_UPDATED - INTEGRATION_FAILED - ISSUE_UPDATED - LOCATION_DOWN - MANUAL - NEW_ISSUE - SCAN_COMPLETED - SCAN_FAILED - SCAN_STARTED throttleMs: type: - number - 'null' description: The throttle in milliseconds for the workflow. filters: type: array items: type: object properties: id: type: string format: uuid type: type: string enum: - ASSETS - EVENTS - INTEGRATIONS - ISSUES - LOCATIONS - PROFILES - SCANS filter: {} view: type: - object - 'null' properties: id: type: string format: uuid name: type: string target: type: string enum: - ASSETS - EVENTS - INTEGRATIONS - ISSUES - LOCATIONS - PROFILES - SCANS data: {} required: - id - name - target required: - id - type - view actions: type: array items: type: object properties: id: type: string format: uuid type: type: string enum: - ACT - EXPORT - NOTIFY parameters: {} internalAction: type: - string - 'null' enum: - UPDATE_ASSET - UPDATE_ISSUE - null integration: type: - object - 'null' properties: id: type: string format: uuid name: type: string kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ required: - id - name - kind required: - id - type - internalAction - integration required: - trigger - throttleMs - filters - actions '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /workflows/{id}: get: tags: - Workflows summary: Get workflow. operationId: getWorkflow description: Get a workflow. parameters: - schema: type: string format: uuid description: The workflow ID example: 00000000-0000-0000-0000-000000000000 required: true description: The workflow ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The workflow ID. name: type: string default: Workflow Name description: The name of the workflow. trigger: type: string enum: - ASSET_FOUND - ASSET_UPDATED - INTEGRATION_FAILED - ISSUE_UPDATED - LOCATION_DOWN - MANUAL - NEW_ISSUE - SCAN_COMPLETED - SCAN_FAILED - SCAN_STARTED throttleMs: type: - number - 'null' description: The throttle in milliseconds for the workflow. filters: type: array items: type: object properties: id: type: string format: uuid type: type: string enum: - ASSETS - EVENTS - INTEGRATIONS - ISSUES - LOCATIONS - PROFILES - SCANS filter: {} view: type: - object - 'null' properties: id: type: string format: uuid name: type: string target: type: string enum: - ASSETS - EVENTS - INTEGRATIONS - ISSUES - LOCATIONS - PROFILES - SCANS data: {} required: - id - name - target required: - id - type - view actions: type: array items: type: object properties: id: type: string format: uuid type: type: string enum: - ACT - EXPORT - NOTIFY parameters: {} internalAction: type: - string - 'null' enum: - UPDATE_ASSET - UPDATE_ISSUE - null integration: type: - object - 'null' properties: id: type: string format: uuid name: type: string kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ required: - id - name - kind required: - id - type - internalAction - integration required: - trigger - throttleMs - filters - actions '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation put: tags: - Workflows summary: Update workflow. operationId: updateWorkflow description: Update a workflow. parameters: - schema: type: string format: uuid description: The workflow ID example: 00000000-0000-0000-0000-000000000000 required: true description: The workflow ID name: id in: path requestBody: content: application/json: schema: type: object properties: name: type: string description: The new name of the integration trigger: type: string enum: - ASSET_FOUND - ASSET_UPDATED - INTEGRATION_FAILED - ISSUE_UPDATED - LOCATION_DOWN - MANUAL - NEW_ISSUE - SCAN_COMPLETED - SCAN_FAILED - SCAN_STARTED throttleMs: type: - number - 'null' description: The throttle in milliseconds for the workflow. filters: type: array items: anyOf: - type: object properties: viewId: type: string format: uuid required: - viewId title: Create workflow filter using view - type: object properties: type: type: string enum: - ISSUES filter: type: object properties: severities: type: - array - 'null' items: type: string enum: - INFO - LOW - MEDIUM - HIGH - CRITICAL risks: type: - array - 'null' items: type: string enum: - UNAUTHENTICATED - SENSITIVE_DATA - CRITICAL_FINDING - PROD_ONLY_MODE - EXPOSED - OPEN_SCHEMA - PRIVATE projectIds: type: - array - 'null' items: type: string applicationIds: type: - array - 'null' items: type: string description: Deprecated, use profileIds instead profileIds: type: - array - 'null' items: type: string assetIds: type: - array - 'null' items: type: string jiraTicket: type: - boolean - 'null' search: type: - string - 'null' categories: type: - array - 'null' items: type: string enum: - ACCESS_CONTROL - CONFIGURATION - INFORMATION_DISCLOSURE - SENSITIVE_DATA - INJECTION - PROTOCOL - REQUEST_FORGERY - RESOURCE_LIMITATION - SCHEMA - CUSTOM scannerKinds: type: - array - 'null' items: type: string enum: - FRONTEND_DAST - BLST_REST - BLST_GRAPHQL - ASM_DNS - ASM_IPV4 - ASM_IPV6 - ASM_IPV4_RANGE - ASM_REST - ASM_GRAPHQL - ASM_WEBAPP - ASM_GRPC - ASM_WEBSOCKET - ASM_MCP - ASM_SOAP - ASM_AWS_ACCOUNT - AUTOMATED_PENTEST_WEBAPP - AUTOMATED_PENTEST_REST - AUTOMATED_PENTEST_GRAPHQL - ASM_AKAMAI_ACCOUNT - ASM_CLOUDFLARE_ACCOUNT - ASM_GCP_PROJECT - ASM_KUBERNETES_CLUSTER - ASM_AZURE_TENANT - ASM_WIZ_ACCOUNT - ASM_POSTMAN_ORGANIZATION - ASM_GITLAB_REPOSITORY - ASM_GITHUB_REPOSITORY - ASM_BITBUCKET_REPOSITORY - ASM_GITLAB_GROUP - ASM_GITHUB_ORGANIZATION - ASM_BITBUCKET_ORGANIZATION - ASM_GRAPHQL_SCHEMA - ASM_OPENAPI - ASM_POSTMAN_COLLECTION - ASM_POSTMAN_ENVIRONMENT - ASM_WP_JSON - ASM_INSOMNIA - ASM_BURPSUITE_EXPORT - ASM_HAR_EXPORT - ASM_CODE_PROJECT - ASM_AWS_LAMBDA - ASM_PACKAGE - ASM_SOFTWARE assetClasses: type: - array - 'null' items: type: string enum: - API_SERVICE - FRONTEND - HOST - CLOUD_HOSTING - CDN - CSPM - DEV_TOOLS - NETWORK - REPOSITORY - SOURCE_CODE_MANAGEMENT - SCHEMA - CODE_PROJECT - CLOUD_COMPONENT - TECHNOLOGY assetTypes: type: - array - 'null' items: type: string enum: - DNS - IPV4 - IPV6 - IPV4_RANGE - REST - GRAPHQL - WEBAPP - GRPC - MCP - WEBSOCKET - SOAP - AWS_ACCOUNT - AKAMAI_ACCOUNT - CLOUDFLARE_ACCOUNT - GCP_PROJECT - KUBERNETES_CLUSTER - AZURE_TENANT - WIZ_ACCOUNT - POSTMAN_ORGANIZATION - GITLAB_REPOSITORY - GITHUB_REPOSITORY - BITBUCKET_REPOSITORY - GITLAB_GROUP - GITHUB_ORGANIZATION - BITBUCKET_ORGANIZATION - GRAPHQL_SCHEMA - OPENAPI - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - WP_JSON - INSOMNIA - BURPSUITE_EXPORT - HAR_EXPORT - CODE_PROJECT - AWS_LAMBDA - PACKAGE - SOFTWARE tagIds: type: - array - 'null' items: type: string noTags: type: - boolean - 'null' scanIds: type: - array - 'null' items: type: string securityTestUids: type: - array - 'null' items: type: string status: type: - array - 'null' items: type: string enum: - OPEN - RESOLVED - MANUAL_REVIEW - IGNORED - FALSE_POSITIVE ids: type: - array - 'null' items: type: string blacklistedIds: type: - array - 'null' items: type: string fullNames: type: - array - 'null' items: type: string blacklistedNames: type: - array - 'null' items: type: string assetStatuses: type: - array - 'null' items: type: string enum: - DEPRECATED - OUT_OF_SCOPE - FALSE_POSITIVE - MONITORED - THIRD_PARTY aiFalsePositive: type: - boolean - 'null' agentic: type: - boolean - 'null' targetIds: type: - array - 'null' items: type: string domains: type: - array - 'null' items: type: string ignoreInventory: type: - boolean - 'null' ignored: type: - boolean - 'null' required: - type - filter title: Create workflow filter using custom filter on issues - type: object properties: type: type: string enum: - PROFILES filter: type: object properties: ids: type: - array - 'null' items: type: string search: type: - string - 'null' risks: type: - array - 'null' items: type: string enum: - UNAUTHENTICATED - SENSITIVE_DATA - CRITICAL_FINDING - PROD_ONLY_MODE - EXPOSED - OPEN_SCHEMA - PRIVATE tagIds: type: - array - 'null' items: type: string noTags: type: - boolean - 'null' projectIds: type: - array - 'null' items: type: string noProjects: type: - boolean - 'null' assetIds: type: - array - 'null' items: type: string assetSchemaIds: type: - array - 'null' items: type: string issueIds: type: - array - 'null' items: type: string kinds: type: - array - 'null' items: type: string enum: - FRONTEND_DAST - BLST_REST - BLST_GRAPHQL - ASM_DNS - ASM_IPV4 - ASM_IPV6 - ASM_IPV4_RANGE - ASM_REST - ASM_GRAPHQL - ASM_WEBAPP - ASM_GRPC - ASM_WEBSOCKET - ASM_MCP - ASM_SOAP - ASM_AWS_ACCOUNT - AUTOMATED_PENTEST_WEBAPP - AUTOMATED_PENTEST_REST - AUTOMATED_PENTEST_GRAPHQL - ASM_AKAMAI_ACCOUNT - ASM_CLOUDFLARE_ACCOUNT - ASM_GCP_PROJECT - ASM_KUBERNETES_CLUSTER - ASM_AZURE_TENANT - ASM_WIZ_ACCOUNT - ASM_POSTMAN_ORGANIZATION - ASM_GITLAB_REPOSITORY - ASM_GITHUB_REPOSITORY - ASM_BITBUCKET_REPOSITORY - ASM_GITLAB_GROUP - ASM_GITHUB_ORGANIZATION - ASM_BITBUCKET_ORGANIZATION - ASM_GRAPHQL_SCHEMA - ASM_OPENAPI - ASM_POSTMAN_COLLECTION - ASM_POSTMAN_ENVIRONMENT - ASM_WP_JSON - ASM_INSOMNIA - ASM_BURPSUITE_EXPORT - ASM_HAR_EXPORT - ASM_CODE_PROJECT - ASM_AWS_LAMBDA - ASM_PACKAGE - ASM_SOFTWARE domains: type: - array - 'null' items: type: string initiators: type: - array - 'null' items: type: string enum: - APPLICATION_CREATION - CI - MANUAL - SCHEDULED - INVENTORY - UNKNOWN lastScanStatuses: type: - array - 'null' items: type: string enum: - STARTING - RUNNING - CANCELED - FINISHED - FAILED problemSeverities: type: - array - 'null' items: type: string enum: - INFO - WARNING - ERROR problemCodes: type: - array - 'null' items: type: string enum: - PL_FAILURE - AUTH_FAILURE - CONFIGURATION_IMPROVEMENT - SCHEMA_IMPROVEMENT - HIGH_NUMBER_OF_ERROR_ENDPOINTS - UNREACHABLE_ASSET - TIMEOUT - INTEGRATION_ERROR - CAPTCHA_HIT - BLOCKED_BY_WAF - RATE_LIMIT_EXCEEDED - NO_SCHEMA_FOUND - NO_AUTHENTICATION_CONFIGURED assetClasses: type: - array - 'null' items: type: string enum: - API_SERVICE - FRONTEND - HOST - CLOUD_HOSTING - CDN - CSPM - DEV_TOOLS - NETWORK - REPOSITORY - SOURCE_CODE_MANAGEMENT - SCHEMA - CODE_PROJECT - CLOUD_COMPONENT - TECHNOLOGY assetStatuses: type: - array - 'null' items: type: string enum: - DEPRECATED - OUT_OF_SCOPE - FALSE_POSITIVE - MONITORED - THIRD_PARTY assetTypes: type: - array - 'null' items: type: string enum: - DNS - IPV4 - IPV6 - IPV4_RANGE - REST - GRAPHQL - WEBAPP - GRPC - MCP - WEBSOCKET - SOAP - AWS_ACCOUNT - AKAMAI_ACCOUNT - CLOUDFLARE_ACCOUNT - GCP_PROJECT - KUBERNETES_CLUSTER - AZURE_TENANT - WIZ_ACCOUNT - POSTMAN_ORGANIZATION - GITLAB_REPOSITORY - GITHUB_REPOSITORY - BITBUCKET_REPOSITORY - GITLAB_GROUP - GITHUB_ORGANIZATION - BITBUCKET_ORGANIZATION - GRAPHQL_SCHEMA - OPENAPI - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - WP_JSON - INSOMNIA - BURPSUITE_EXPORT - HAR_EXPORT - CODE_PROJECT - AWS_LAMBDA - PACKAGE - SOFTWARE scanIds: type: - array - 'null' items: type: string required: - type - filter title: Create workflow filter using custom filter on profiles - type: object properties: type: type: string enum: - ASSETS filter: type: object properties: search: type: - string - 'null' risks: type: - array - 'null' items: type: string enum: - UNAUTHENTICATED - SENSITIVE_DATA - CRITICAL_FINDING - PROD_ONLY_MODE - EXPOSED - OPEN_SCHEMA - PRIVATE tagIds: type: - array - 'null' items: type: string exactTagIds: type: - array - 'null' items: type: string noTags: type: - boolean - 'null' integrationIds: type: - array - 'null' items: type: string types: type: - array - 'null' items: type: string enum: - DNS - IPV4 - IPV6 - IPV4_RANGE - REST - GRAPHQL - WEBAPP - GRPC - MCP - WEBSOCKET - SOAP - AWS_ACCOUNT - AKAMAI_ACCOUNT - CLOUDFLARE_ACCOUNT - GCP_PROJECT - KUBERNETES_CLUSTER - AZURE_TENANT - WIZ_ACCOUNT - POSTMAN_ORGANIZATION - GITLAB_REPOSITORY - GITHUB_REPOSITORY - BITBUCKET_REPOSITORY - GITLAB_GROUP - GITHUB_ORGANIZATION - BITBUCKET_ORGANIZATION - GRAPHQL_SCHEMA - OPENAPI - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - WP_JSON - INSOMNIA - BURPSUITE_EXPORT - HAR_EXPORT - CODE_PROJECT - AWS_LAMBDA - PACKAGE - SOFTWARE excludeTypes: type: - array - 'null' items: type: string enum: - DNS - IPV4 - IPV6 - IPV4_RANGE - REST - GRAPHQL - WEBAPP - GRPC - MCP - WEBSOCKET - SOAP - AWS_ACCOUNT - AKAMAI_ACCOUNT - CLOUDFLARE_ACCOUNT - GCP_PROJECT - KUBERNETES_CLUSTER - AZURE_TENANT - WIZ_ACCOUNT - POSTMAN_ORGANIZATION - GITLAB_REPOSITORY - GITHUB_REPOSITORY - BITBUCKET_REPOSITORY - GITLAB_GROUP - GITHUB_ORGANIZATION - BITBUCKET_ORGANIZATION - GRAPHQL_SCHEMA - OPENAPI - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - WP_JSON - INSOMNIA - BURPSUITE_EXPORT - HAR_EXPORT - CODE_PROJECT - AWS_LAMBDA - PACKAGE - SOFTWARE classes: type: - array - 'null' items: type: string enum: - API_SERVICE - FRONTEND - HOST - CLOUD_HOSTING - CDN - CSPM - DEV_TOOLS - NETWORK - REPOSITORY - SOURCE_CODE_MANAGEMENT - SCHEMA - CODE_PROJECT - CLOUD_COMPONENT - TECHNOLOGY excludeClasses: type: - array - 'null' items: type: string enum: - API_SERVICE - FRONTEND - HOST - CLOUD_HOSTING - CDN - CSPM - DEV_TOOLS - NETWORK - REPOSITORY - SOURCE_CODE_MANAGEMENT - SCHEMA - CODE_PROJECT - CLOUD_COMPONENT - TECHNOLOGY projectIds: type: - array - 'null' items: type: string exactProjectIds: type: - array - 'null' items: type: string noProjects: type: - boolean - 'null' applicationIds: type: - array - 'null' items: type: string foundByProfileIds: type: - array - 'null' items: type: string foundByIntegrationIds: type: - array - 'null' items: type: string scanIds: type: - array - 'null' items: type: string scannerKinds: type: - array - 'null' items: type: string enum: - FRONTEND_DAST - BLST_REST - BLST_GRAPHQL - ASM_DNS - ASM_IPV4 - ASM_IPV6 - ASM_IPV4_RANGE - ASM_REST - ASM_GRAPHQL - ASM_WEBAPP - ASM_GRPC - ASM_WEBSOCKET - ASM_MCP - ASM_SOAP - ASM_AWS_ACCOUNT - AUTOMATED_PENTEST_WEBAPP - AUTOMATED_PENTEST_REST - AUTOMATED_PENTEST_GRAPHQL - ASM_AKAMAI_ACCOUNT - ASM_CLOUDFLARE_ACCOUNT - ASM_GCP_PROJECT - ASM_KUBERNETES_CLUSTER - ASM_AZURE_TENANT - ASM_WIZ_ACCOUNT - ASM_POSTMAN_ORGANIZATION - ASM_GITLAB_REPOSITORY - ASM_GITHUB_REPOSITORY - ASM_BITBUCKET_REPOSITORY - ASM_GITLAB_GROUP - ASM_GITHUB_ORGANIZATION - ASM_BITBUCKET_ORGANIZATION - ASM_GRAPHQL_SCHEMA - ASM_OPENAPI - ASM_POSTMAN_COLLECTION - ASM_POSTMAN_ENVIRONMENT - ASM_WP_JSON - ASM_INSOMNIA - ASM_BURPSUITE_EXPORT - ASM_HAR_EXPORT - ASM_CODE_PROJECT - ASM_AWS_LAMBDA - ASM_PACKAGE - ASM_SOFTWARE workflowIds: type: - array - 'null' items: type: string domains: type: - array - 'null' items: type: string environments: type: - array - 'null' items: type: string enum: - UNKNOWN - DEVELOPMENT - STAGING - PRODUCTION cloudProviders: type: - array - 'null' items: type: string enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - VERCEL - UNKNOWN wafProviders: type: - array - 'null' items: type: string enum: - UNKNOWN - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - YUNJIASU - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - WP_CERBER_SECURITY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - ACE_XML_GATEWAY - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FIREPASS - TRAFFICSHIELD - FASTLY - FORTIWEB - AZURE_FRONT_DOOR - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - DATAPOWER - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KS_WAF - KONA_SITEDEFENDER - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - DATADOME - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - APPWALL - REBLAZE - RSFIREWALL - ASP_NET_WAF - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURE_ENTRY - EEYE_SECUREIIS - SECURESPHERE - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - UTM_WEB_PROTECTION - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRANSIP_WEB_FIREWALL - UEWAF - URLMASTER_SECURITYCHECK - URLSCAN - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - RAYWAF - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNSUO - YXLINK - ZENEDGE - ZSCALER captchaProviders: type: - array - 'null' items: type: string enum: - RECAPTCHA - HCAPTCHA - CLOUDFLARE_TURNSTILE - GEETEST - FRIENDLY_CAPTCHA - AWS_WAF_CAPTCHA - MTCAPTCHA - YANDEX_SMARTCAPTCHA - ARCAPTCHA - ALTCHA - FUNCAPTCHA - SLIDER_CAPTCHA - PICATCHA - SNAPHOST - STARTEST - ADCAPTCHA - V4GUARD_CHECKPOINT - COINHIVE_CAPTCHA - RINGCAPTCHA - REALLY_SIMPLE_CAPTCHA - OTHER statuses: type: - array - 'null' items: type: string enum: - DEPRECATED - OUT_OF_SCOPE - FALSE_POSITIVE - MONITORED - THIRD_PARTY severities: type: - array - 'null' items: type: string enum: - INFO - LOW - MEDIUM - HIGH - CRITICAL parentLinks: type: - array - 'null' items: type: object properties: parentId: type: - string - 'null' verb: type: string enum: - FINDS - DEFINES - DEFINES_FAVORITE - IS_SOURCE - CONTAINS - USES required: - verb childrenLinks: type: - array - 'null' items: type: object properties: childId: type: - string - 'null' verb: type: string enum: - FINDS - DEFINES - DEFINES_FAVORITE - IS_SOURCE - CONTAINS - USES required: - verb schemaIds: type: - array - 'null' items: type: string assetIds: type: - array - 'null' items: type: string blacklistAssetIds: type: - array - 'null' items: type: string manuallyCreated: type: - boolean - 'null' sources: type: - array - 'null' items: type: object properties: manuallyCreated: type: - boolean - 'null' integrationId: type: - string - 'null' assetId: type: - string - 'null' visibility: type: - array - 'null' items: type: string enum: - PRIVATE - INTERNAL - PUBLIC ports: type: - array - 'null' items: type: number frameworks: type: - array - 'null' items: type: string enum: - UNKNOWN - REST_DJANGO - REST_FLASK - REST_FASTAPI - REST_EXPRESS_JS - REST_SPRING_BOOT - REST_RUBY_ON_RAILS - REST_ASP_NET - REST_LARAVEL - REST_NESTJS - REST_SCALA_PLAY - REST_CLOJURE - REST_SYMFONY - REST_GIN - REST_HONO - REST_NEXTJS - REST_NUXTJS - GRAPHQL_APOLLO - GRAPHQL_GRAPHQLYOGA - FRONTEND_REACT - FRONTEND_VUE - FRONTEND_ANGULAR - FRONTEND_SVELTE - FRONTEND_JQUERY - FRONTEND_JAVASCRIPT - FRONTEND_DJANGO prioritizeFavorites: type: - boolean - 'null' languages: type: - array - 'null' items: type: string ownerEmails: type: - array - 'null' items: type: string uris: type: - array - 'null' items: type: string technologyKeys: type: - array - 'null' items: type: string ownTechnologyKeys: type: - array - 'null' items: type: string required: - type - filter title: Create workflow filter using custom filter on assets description: The filters to update the workflow with, this will replace the existing filters actions: type: array items: anyOf: - type: object properties: type: type: string enum: - EXPORT parameters: type: object properties: url: type: string format: type: string enum: - json - xml required: - url - format integrationKind: type: string enum: - WEBHOOK required: - type - parameters - integrationKind title: Create Export workflow action using Webhook - type: object properties: type: type: string enum: - EXPORT parameters: type: object properties: projectId: type: string issueType: type: string propertiesMapping: type: array items: oneOf: - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.severity required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.createdAt required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.name required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.category required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.context required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.status required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.remediation required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.targets required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.linkInAllIssues required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.linkInAsset required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.linkInScan required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - issue.linkInProfile required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - profile.name required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - profile.scannerKind required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - asset.name required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - asset.url required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - asset.tags required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - asset.externalUrl required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - asset.type required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - asset.class required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - customRule.name required: - jiraPropertyId - map - field - type: object properties: jiraPropertyId: type: string map: type: array items: type: object properties: escapeValue: type: - string - 'null' description: The value of the Escape field, stored as a json value to be parsed into a specific format depending on the Escape field type. jiraValue: anyOf: - type: string - type: array items: type: string - type: 'null' description: The value of the Jira field, stored "as is" to be sent to the Jira API to create the issue, eventually in an array if the Jira field is an array required: - escapeValue - jiraValue field: type: string enum: - customRule.link required: - jiraPropertyId - map - field staticPropertiesMapping: type: array items: type: object properties: jiraPropertyId: type: string value: anyOf: - type: string - type: array items: type: string - type: 'null' append: type: boolean default: false required: - jiraPropertyId - value default: [] parentKey: type: - string - 'null' default: null disableDefaultMappings: type: - boolean - 'null' required: - projectId - issueType - propertiesMapping integrationKind: type: string enum: - JIRA integrationId: type: string format: uuid required: - type - parameters - integrationKind - integrationId title: Create Export workflow action using Jira - type: object properties: type: type: string enum: - EXPORT parameters: type: object properties: minSeverity: type: - string - 'null' enum: - INFO - LOW - MEDIUM - HIGH - CRITICAL - null description: The minimum severity of the issues to export required: - minSeverity integrationKind: type: string enum: - WIZ required: - type - parameters - integrationKind title: Create Export workflow action using Wiz - type: object properties: type: type: string enum: - NOTIFY parameters: type: object properties: to: oneOf: - type: object properties: type: type: string enum: - emails emails: type: array items: type: string required: - type - emails - type: object properties: type: type: string enum: - roles global: type: boolean description: Send the notification to global holders of the role projectIds: type: array items: type: string format: uuid description: Send the notification to holders of the role in the projects roles: type: array items: type: string format: uuid required: - type - global - projectIds - roles - type: object properties: type: type: string enum: - owners required: - type - type: object properties: type: type: string enum: - projectMembers required: - type - type: object properties: type: type: string enum: - organizationAdmins required: - type required: - to integrationKind: type: string enum: - EMAIL required: - type - parameters - integrationKind title: Create Notify workflow action using Email - type: object properties: type: type: string enum: - NOTIFY parameters: type: object properties: url: type: string required: - url integrationKind: type: string enum: - SLACK_WEBHOOK required: - type - parameters - integrationKind title: Create Notify workflow action using Slack - type: object properties: type: type: string enum: - NOTIFY parameters: type: object properties: url: type: string required: - url integrationKind: type: string enum: - DISCORD_WEBHOOK required: - type - parameters - integrationKind title: Create Notify workflow action using Discord - type: object properties: type: type: string enum: - NOTIFY parameters: type: object properties: url: type: string required: - url integrationKind: type: string enum: - TEAMS_WEBHOOK required: - type - parameters - integrationKind title: Create Notify workflow action using Teams description: The actions to update the workflow with, this will replace the existing actions projectIds: type: array items: type: string format: uuid description: Optional list of project IDs to attach to the integration example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: - trigger responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The workflow ID. name: type: string default: Workflow Name description: The name of the workflow. trigger: type: string enum: - ASSET_FOUND - ASSET_UPDATED - INTEGRATION_FAILED - ISSUE_UPDATED - LOCATION_DOWN - MANUAL - NEW_ISSUE - SCAN_COMPLETED - SCAN_FAILED - SCAN_STARTED throttleMs: type: - number - 'null' description: The throttle in milliseconds for the workflow. filters: type: array items: type: object properties: id: type: string format: uuid type: type: string enum: - ASSETS - EVENTS - INTEGRATIONS - ISSUES - LOCATIONS - PROFILES - SCANS filter: {} view: type: - object - 'null' properties: id: type: string format: uuid name: type: string target: type: string enum: - ASSETS - EVENTS - INTEGRATIONS - ISSUES - LOCATIONS - PROFILES - SCANS data: {} required: - id - name - target required: - id - type - view actions: type: array items: type: object properties: id: type: string format: uuid type: type: string enum: - ACT - EXPORT - NOTIFY parameters: {} internalAction: type: - string - 'null' enum: - UPDATE_ASSET - UPDATE_ISSUE - null integration: type: - object - 'null' properties: id: type: string format: uuid name: type: string kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ required: - id - name - kind required: - id - type - internalAction - integration required: - trigger - throttleMs - filters - actions '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request delete: tags: - Workflows summary: Delete workflow. operationId: deleteWorkflow description: Delete a workflow. parameters: - schema: type: string format: uuid description: The workflow ID example: 00000000-0000-0000-0000-000000000000 required: true description: The workflow ID name: id in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 description: The workflow ID. name: type: string default: Workflow Name description: The name of the workflow. trigger: type: string enum: - ASSET_FOUND - ASSET_UPDATED - INTEGRATION_FAILED - ISSUE_UPDATED - LOCATION_DOWN - MANUAL - NEW_ISSUE - SCAN_COMPLETED - SCAN_FAILED - SCAN_STARTED throttleMs: type: - number - 'null' description: The throttle in milliseconds for the workflow. filters: type: array items: type: object properties: id: type: string format: uuid type: type: string enum: - ASSETS - EVENTS - INTEGRATIONS - ISSUES - LOCATIONS - PROFILES - SCANS filter: {} view: type: - object - 'null' properties: id: type: string format: uuid name: type: string target: type: string enum: - ASSETS - EVENTS - INTEGRATIONS - ISSUES - LOCATIONS - PROFILES - SCANS data: {} required: - id - name - target required: - id - type - view actions: type: array items: type: object properties: id: type: string format: uuid type: type: string enum: - ACT - EXPORT - NOTIFY parameters: {} internalAction: type: - string - 'null' enum: - UPDATE_ASSET - UPDATE_ISSUE - null integration: type: - object - 'null' properties: id: type: string format: uuid name: type: string kind: type: string enum: - AKAMAI - AWS - AZURE - BITBUCKET_REPO - CLOUDFLARE - CUSTOM - DISCORD_WEBHOOK - DNS - EMAIL - GCP - GITHUB_API_KEY - GITLAB_API_KEY - JIRA - KUBERNETES - POSTMAN_API_KEY - SLACK_WEBHOOK - TEAMS_WEBHOOK - WEBHOOK - WIZ required: - id - name - kind required: - id - type - internalAction - integration required: - trigger - throttleMs - filters - actions '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /statistics: get: tags: - Statistics summary: Get organization statistics operationId: getStatistics description: 'Get a high-level overview of the organization security posture: application count, asset count, and open issue counts by severity.' responses: '200': description: OK content: application/json: schema: type: object properties: applications: type: object properties: count: type: number description: Total number of applications with scans required: - count assets: type: object properties: total: type: number description: Total number of monitored assets required: - total issues: type: object properties: high: type: number description: Number of HIGH severity open issues medium: type: number description: Number of MEDIUM severity open issues low: type: number description: Number of LOW severity open issues info: type: number description: Number of INFO severity open issues required: - high - medium - low - info required: - applications - assets - issues /asm/scans: post: tags: - Asm summary: Trigger ASM scans operationId: triggerAsmScans description: Trigger Attack Surface Management scans on assets matching the given filter. If no filter is provided, scans all monitored assets. requestBody: content: application/json: schema: type: object properties: where: type: object properties: assetIds: type: array items: type: string description: Filter by specific asset IDs types: type: array items: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: Filter by asset types statuses: type: array items: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: Filter by asset statuses description: Asset filter predicate; omit to scan all monitored assets responses: '200': description: OK content: application/json: schema: type: object properties: triggered: type: boolean description: Whether ASM scans were successfully triggered required: - triggered '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation webhooks: {}