Need help with your APIs? I offer API discovery, governance & evangelism services. Explore services →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Rapid7 Scans API

A Scan encapsulates all the information for a single execution of the criteria defined in the provided Scan Config. An App and a Scan Config must be created prior to submitting a Scan. All Scans submitted via the API are currently treated as an 'on-demand' request to perform the Scan, and as such will be queued for immanent execution. A Scan, once submitted, cannot be modified per-se, as the life cycle of the Scan is managed by the product; though, it is possible to manipulate the life cycle of each Scan by submitting an Action (e.g. a request to pause/resume or stop/cancel). A Scan can only be deleted if it is in a Failed state. A Scan which is not yet complete can be forced into a Failed state by submitting a CANCEL Action. A Scan which is submitted using a Scan Config with validation errors or without a valid Target will result in a Failed Scan.

Rapid7 Scans API is one of 50 APIs that Rapid7 publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Scans. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 9 operations across 6 paths, and defines 16 schemas. It is described by OpenAPI 3.1.0, at version v1.

Requests are made against a single base URL, https://[region].api.insight.rapid7.com/ias/v1.

9 operations 6 paths 16 schemas 1 DELETE6 GET1 POST1 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.1.0
API Version
v1
Base URL
https://us.api.insight.rapid7.com/vm/v4
Resource Areas
1

Paths & Operations 9

Across 6 paths, the API surfaces 9 operations — 1 DELETE, 6 GET, 1 POST, 1 PUT. Each is listed below with its method, path, parameters, and response codes.

Scans 9

A Scan encapsulates all the information for a single execution of the criteria defined in the provided Scan Config. An App and a Scan Config must be created prior to submitting a…

GET
/scans
Get Scans
get-scans 4 params → 415200400401403404500
POST
/scans
Submit Scan
submit-scan body → 415201400401403404500409
GET
/scans/{scan-id}
Get Scan
get-scan 1 param → 415200400401403404500
DELETE
/scans/{scan-id}
Delete Scan
delete-scan 1 param → 415204400401403404500409
GET
/scans/{scan-id}/action
Get Scan Action
get-scan-action 1 param → 415204400401403404500
PUT
/scans/{scan-id}/action
Submit Scan Action
submit-scan-action 1 param body → 415200400401403404500409
GET
/scans/{scan-id}/engine-events
Get Scan Engine Events
get-scan-engine-events 1 param → 415200400401403404500
GET
/scans/{scan-id}/execution-details
Get Scan Execution Details
get-scan-execution-details 1 param → 415200400401403404500
GET
/scans/{scan-id}/platform-events
Get Scan Platform Events
get-scan-platform-events 1 param → 415200400401403404500

Schemas 16

The contract defines 16 schemas that model the data the API accepts and returns. The most detailed are EntityModelScan (12 properties), Scan (11 properties), ScanExecutionDetails (10 properties), PageMetadata (6 properties). Each schema is shown below with its type and property counts.

ReadOnlyIdResource
object
The ID of the module
1 property
ValidationErrors
object
4 properties
ScanStateActionResource
object
1 property 1 required
SpecializedScanParamsResource
object
The Specialized Scan Parameters Resource used to start a validation scan with a subset of vulnerability ids. Should not be included if a Scan Verification Reso…
4 properties 1 required
PageScan
object
3 properties
LogEvent
object
2 properties
Link
object
4 properties
ScanVerificationResource
object
The Validation resource. Should not be included if a Specialized Scan Parameters Resource has been provided.
1 property
PageMetadata
object
6 properties
ScanExecutionDetails
object
10 properties
ValidationError
object
3 properties
Scan
object
11 properties 1 required
scan_config
object
The Scan Config used when the Scan was submitted, must be associated with the App specified for this Scan
1 property
Error
object
3 properties
EntityModelScan
object
12 properties 1 required
ScanSubmitter
object
The submitter of the Scan
2 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

rapid7-scans-api-openapi.yml Raw ↑

Other APIs Rapid7 publishes across the network.

Rapid7 InsightVM Cloud API
Rapid7 Insight Platform API
Rapid7 InsightIDR API
Rapid7 Accounts API
Rapid7 Administration API
Rapid7 Apps API
Rapid7 Asset API
Rapid7 Asset Discovery API
Rapid7 Asset Group API
Rapid7 Assets API
Rapid7 Attachments API
Rapid7 Attack Templates API