Need help with your APIs? I offer API discovery, governance & evangelism services. Explore services →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Rapid7 Scan Configs API

A Scan Config defines all the necessary information required to perform a Scan of an App. An App must be created prior to creating a Scan Config. It is the main document that describes what and how web resources should be discovered and Scanned, and can be tailored from Scan to Scan in order to refine the results gathered. It must define which Attack Template to use during the attacking phase of the Scan. Currently, all Scan Configs created via the API will by default specify that Scans will be executed on Cloud engines; support for On-Premise engines is available by specifying appropriate assignment ID (a known engine group ID), type (ENGINE_GROUP) and environment (ON_PREMISE) values. A Scan Config must define a minimum set of Options that specify the following:At least one Seed URLAt least one Crawling Scope ConstraintIf any of the Options defined for a Scan Config are considered invalid, an explanatory message should be included in the "errors" property of the owning Scan Config response body. All Seed URLs and Scope Constraint URLs provided must have a valid Target.

Rapid7 Scan Configs API is one of 50 APIs that Rapid7 publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Scan Configs. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 9 operations across 4 paths, and defines 89 schemas. It is described by OpenAPI 3.1.0, at version v1.

Requests are made against a single base URL, https://[region].api.insight.rapid7.com/ias/v1.

9 operations 4 paths 89 schemas 1 DELETE4 GET1 PATCH1 POST2 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.1.0
API Version
v1
Base URL
https://us.api.insight.rapid7.com/vm/v4
Resource Areas
1

Paths & Operations 9

Across 4 paths, the API surfaces 9 operations — 1 DELETE, 4 GET, 1 PATCH, 1 POST, 2 PUT. Each is listed below with its method, path, parameters, and response codes.

Scan Configs 9

A Scan Config defines all the necessary information required to perform a Scan of an App. An App must be created prior to creating a Scan Config. It is the main document that desc…

GET
/scan-configs
Get Scan Configs
get-scan-configs 5 params → 415200400401403404500
POST
/scan-configs
Create Scan Config
create-scan-config body → 415201400401403404500409
GET
/scan-configs/options/default
Get Scan Configs Options Default
get-scan-configs-options-default → 415200400401403404500
GET
/scan-configs/{scan-config-id}
Get Scan Config
get-scan-config 1 param → 415200400401403404500
PUT
/scan-configs/{scan-config-id}
Update Scan Config
update-scan-config 1 param body → 415200400401403404500409
DELETE
/scan-configs/{scan-config-id}
Delete Scan Config
delete-scan-config 1 param → 415204400401403404500409
GET
/scan-configs/{scan-config-id}/options
Get Scan Config Options
get-scan-config-options 1 param → 415200400401403404500
PUT
/scan-configs/{scan-config-id}/options
Update Scan Config Options
update-scan-config-options 1 param body → 415200400401403404500409
PATCH
/scan-configs/{scan-config-id}/options
Patch Scan Config Options
patch-scan-config-options 1 param body → 415200400401403404500

Schemas 89

The contract defines 89 schemas that model the data the API accepts and returns. The most detailed are CrawlConfig (103 properties), AuthConfig (68 properties), ScanConfigOptions (24 properties), NetworkSettingsConfig (20 properties). Each schema is shown below with its type and property counts.

CrawlerInitializationConfig
object
12 properties
GrayListExtension
object
1 property
ScanConfigOptions
object
24 properties
UserDoNotAttackParam
object
2 properties
MacroFile__1
object
10 properties
BinaryContentType
object
1 property
SeleniumFile
object
1 property
ParameterTrainingConfig
object
2 properties
OneTimePasswordConfig
object
5 properties
TrainingParameter
object
7 properties
ChromeHostConfig
object
1 property
CustomParameterFile
object
2 properties
Wsdl
object
1 property
FrameworkConfig
object
10 properties
ScanConfig
object
8 properties 3 required
BrowserDoNotDownloadContentType
object
1 property
AlfDataFile
object
4 properties
GlobalTokenReplacement
object
6 properties
ManualCrawlingConfig
object
1 property
ValidationErrors
object
4 properties
ChatbotConfig
object
17 properties
ScanModuleParameterFiles
object
2 properties
WebServiceAuthConfig
object
7 properties
TextExtension
object
1 property
ParameterParserConfig
object
3 properties
CrawlConfig
object
103 properties
MsalConfig
object
9 properties
HmacConfig
object
4 properties
BinaryExtension
object
1 property
SequenceConfig
object
3 properties
DenyListExtension
object
1 property
SeleniumConfig
object
6 properties
CustomHeaders
object
1 property
TokenReplacement
object
4 properties
BrowserDownloadAllowlist
object
1 property
ScopeConstraint
object
5 properties
TokenReplacementConfig
object
1 property
WebDriverConfig
object
2 properties
StandardUrlParserConfig
object
6 properties
ParameterValue
object
3 properties
SslCertConfig
object
5 properties
WebServiceConfig
object
15 properties
DefaultDoNotAttackParam
object
2 properties
MacroConfig
object
2 properties
BrowserFormLoginConfig
object
8 properties
WebServiceParameter
object
2 properties
DomElementRestriction
object
8 properties
CrawlerMonitoringConfig
object
7 properties
OauthConfig
object
18 properties
GraphQlConfigObject
object
8 properties
ParameterValueConfig
object
1 property
Error
object
3 properties
SequenceRequest
object
2 properties
HttpAuthExt
object
3 properties
LockedCookie
object
1 property
FrameworksCrawlConfig
object
3 properties
SwaggerFile
object
4 properties
ManualSequenceConfig
object
1 property
app
object
The App that the Scan is associated with
1 property
AttackerConfig
object
18 properties
BrowserDoNotDownloadExtension
object
1 property
MultiRegexUrlParserConfig
object
6 properties
PageScanConfig
object
3 properties
OAuthCustomField
object
2 properties
TrafficFile
object
5 properties
HttpHeadersConfig
object
11 properties
SequenceIgnoreExtension
object
1 property
EntityModelScanConfig
object
9 properties 3 required
SeedUrl
object
1 property
AutoSequenceConfig
object
2 properties
XmlContentType
object
1 property
DomRestrictions
object
5 properties
EngineAssignment
object
The engine assignment that the Scan should use
3 properties 1 required
Link
object
4 properties
NetworkSettingsConfig
object
20 properties
ProxyConfig
object
9 properties
MacroFile
object
6 properties
SequenceIgnoreContentType
object
1 property
HtmlContentType
object
1 property
TextContentType
object
1 property
OneTimeTokenConfig
object
5 properties
PageMetadata
object
6 properties
attack_template
object
The attack template that the Scan Config should use
1 property
ValidationError
object
3 properties
ProxyExclusions
object
1 property
PerformanceConfig
object
7 properties
AuthConfig
object
68 properties
TrafficHeader
object
1 property
HttpParameter
object
3 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

rapid7-scan-configs-api-openapi.yml Raw ↑

Other APIs Rapid7 publishes across the network.

Rapid7 InsightVM Cloud API
Rapid7 Insight Platform API
Rapid7 InsightIDR API
Rapid7 Accounts API
Rapid7 Administration API
Rapid7 Apps API
Rapid7 Asset API
Rapid7 Asset Discovery API
Rapid7 Asset Group API
Rapid7 Assets API
Rapid7 Attachments API
Rapid7 Attack Templates API