How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Qwiet Ai scans API

The instances where Qwiet AI by Harness is invoked to identify findings in an application.[![Run in Postman](https://run.pstmn.io/button.svg)](https://god.gw.postman.com/run-collection/9829310-dc6a68d5-995d-4ba4-8098-e3b67773cf0e?action=collection%2Ffork&collection-url=entityId%3D9829310-dc6a68d5-995d-4ba4-8098-e3b67773cf0e%26entityType%3Dcollection%26workspaceId%3Da63f69cc-5c31-4f2b-8d28-b647f83b9e97)

Qwiet Ai scans API is one of 27 APIs that Qwiet Ai publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Scans. The published artifact set on APIs.io includes an OpenAPI specification and authentication docs.

This API exposes 9 operations across 9 paths, and defines 23 schemas. It is described by OpenAPI 3.2.0, at version 4.0.0.

Requests are made against a single base URL, https://app.shiftleft.io/api/v4.

9 operations 9 paths 23 schemas 8 GET1 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
4.0.0
Base URL
https://app.shiftleft.io/api/v4
Authentication
HTTP Bearer
Resource Areas
1

Authentication & Security 1

Qwiet Ai scans API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (BearerToken).

  • BearerToken — Use of the Qwiet API requires an access token, which is available via the Qwiet Dashboard (either under [Account Settings](https://app.shiftleft.io/user/profil…

Paths & Operations 9

Across 9 paths, the API surfaces 9 operations — 8 GET, 1 POST. Each is listed below with its method, path, parameters, and response codes.

scans 9

The instances where Qwiet AI by Harness is invoked to identify findings in an application. [![Run in Postman](https://run.pstmn.io/button.svg)](https://god.gw.postman.com/run-coll…

GET
/orgs/{orgID}/apps/{appID}/scans
List scans
ListScans 4 params → 200default
GET
/orgs/{orgID}/apps/{appID}/scans/compare
Compare scans
ListScansCompare 4 params → 200default
POST
/orgs/{orgID}/apps/{compoundName}/scans/check
Check a scan against a set of rules
CheckScans 2 params body → 200default
GET
/orgs/{orgID}/apps/{appID}/scans/{scanID}
Read scan details
ReadScan 3 params → 200default
GET
/orgs/{orgID}/apps/{appID}/scans/{scanID}/report
Read check scans report
ScansCheckReport 3 params → 200default
GET
/orgs/{orgID}/compounds/named/{compoundName}/scans/streamlined
List scans in a compound, returning a subset of the scan summary information
GetStreamlinedScans 5 params → 200default
GET
/orgs/{orgID}/compounds/named/{compoundName}/scans/{scanID}
Read compound scan
ReadCompoundScan 4 params → 200default
GET
/orgs/{orgID}/compounds/named/{compoundName}/scans
List Scans of Compound
ListScansInCompound 6 params → 200default
GET
/orgs/{orgID}/apps/{appID}/scans/{scanID}/owasp_counts
Read scan's finding counts (grouped by OWASP category)
ReadAppScanFindingsOWASPGrouped 3 params → 200default

Schemas 23

The contract defines 23 schemas that model the data the API accepts and returns. The most detailed are Scan (16 properties), StreamlinedScan (12 properties), ScanDiffFinding (12 properties), ScanInfo (9 properties). Each schema is shown below with its type and property counts.

TagWithNumber
object
2 properties 2 required
Scan
object
16 properties 4 required
AppScanCheckResponse
object
4 properties 2 required
AppScanCheckScan
object
SCAVulnCounts
SuccessResponse
object
1 property 1 required
ScanInfo
object
9 properties 4 required
OSSScan
object
3 properties 1 required
TagWithString
object
2 properties 2 required
StreamlinedScan
object
12 properties 9 required
Severity
string
The severity of a finding
OWASPCounts
object
A hierarchical count of findings per category. The "2021" and "2025" keys are absent for scans created before the respective categorization was deployed (unles…
3 properties
Error
object
4 properties 3 required
FindingsSummary
object
8 properties 1 required
AppScanCheckScanInfo
object
1 property 1 required
NextPage
string
URL for the next page of results
SASTVulnCounts
object
4 properties 4 required
TagCount
CompoundScanResponse
object
5 properties
AppScanCheckFindingsSummary
object
5 properties 2 required
Tag
ScanDiff
object
5 properties
ScanDiffFinding
object
12 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

qwiet-ai-scans-api-openapi.yml Raw ↑

Other APIs Qwiet Ai publishes across the network.

Qwiet Ai alerting API
Qwiet Ai analyze API
Qwiet Ai app_groups API
Qwiet Ai app_labels API
Qwiet Ai apps API
Qwiet Ai autofix API
Qwiet Ai azureboard API
Qwiet Ai branches API
Qwiet Ai comments API
Qwiet Ai compounds API
Qwiet Ai findings API
Qwiet Ai org_backup API
Where this information came from

This is an independent, third-party profile of Qwiet Ai scans API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.