{ "info": { "_postman_id": "b62cdc25-afd6-4527-837b-c6ad607ea262", "name": "Invicti ASPM (Kondukto) REST API v2 Authorization Managers Scans API", "description": "Public REST API v2 for the Invicti ASPM platform (formerly Kondukto), an Application Security Posture Management platform that centralizes SAST, DAST, SCA, container and pentest findings from more than eighty scanners. The API manages projects, products, teams, labels, scans and vulnerabilities, and is the same public API the open-source KDT command-line client uses. Assembled by API Evangelist from the per-operation OpenAPI 3.1 definitions Kondukto publishes on each page of its API reference.\n\nContact Support:\n Name: Kondukto Support\n Email: support@kondukto.io", "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json", "createdAt": "2026-07-28T10:57:13.000Z", "updatedAt": "2026-07-28T10:57:13.000Z", "lastUpdatedBy": "35240", "uid": "35240-b62cdc25-afd6-4527-837b-c6ad607ea262" }, "item": [ { "name": "api", "item": [ { "name": "v2", "item": [ { "name": "scans", "item": [ { "name": "completed", "item": [ { "name": "Get Completed Scans", "id": "5c5879e7-06ea-4440-8e8d-fe6454a166ac", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/completed?start=0&limit=30", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "completed" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" } ] }, "description": "This endpoint returns scans that completed." }, "response": [ { "id": "37759088-fdac-49ff-bcb1-0345ddca589f", "name": "200", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/completed?start=0&limit=30", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "completed" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"start\": 0,\n \"limit\": 0,\n \"total\": 0,\n \"scans\": [\n {\n \"id\": \"\",\n \"tool\": \"\",\n \"scan_type\": \"\",\n \"project\": {\n \"id\": \"\"\n },\n \"finished_at\": \"\",\n \"started_at\": \"\",\n \"scanparams\": {\n \"id\": \"\"\n },\n \"duration\": 0\n },\n {\n \"id\": \"\",\n \"tool\": \"\",\n \"scan_type\": \"\",\n \"project\": {\n \"id\": \"\"\n },\n \"finished_at\": \"\",\n \"started_at\": \"\",\n \"scanparams\": {\n \"id\": \"\"\n },\n \"duration\": 0\n }\n ]\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-37759088-fdac-49ff-bcb1-0345ddca589f" }, { "id": "f4c95ba2-1d8a-44eb-a40f-d36ad64adef7", "name": "400", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/completed?start=0&limit=30", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "completed" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\"\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-f4c95ba2-1d8a-44eb-a40f-d36ad64adef7" } ], "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-5c5879e7-06ea-4440-8e8d-fe6454a166ac" } ], "id": "45667eef-46ab-4a9d-9be1-3e45161fe33a", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-45667eef-46ab-4a9d-9be1-3e45161fe33a" }, { "name": "create", "item": [ { "name": "Create New Scan", "id": "f99f7947-3757-4489-b1e3-6a7d44fe6a44", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"scanparams_id\": \"\",\n \"branch\": \"\",\n \"project\": \"\",\n \"tool_id\": \"\",\n \"meta_data\": \"\",\n \"pr\": {\n \"ok\": \"\",\n \"target\": \"\",\n \" pr_number\": \"\",\n \"no_decoration\": \"\"\n },\n \"custom\": {\n \"type\": \"\",\n \"params\": \"\"\n },\n \"fork_scan\": \"\",\n \"fork_source_branch\": \"\",\n \"override_fork_source_branch\": \"\",\n \"environment\": \"\",\n \"scheduled\": false,\n \"api_rrule\": {\n \"frequency\": \"\",\n \"interval\": \"\",\n \"count\": \"\",\n \"days_of_week\": [\n \"\",\n \"\"\n ],\n \"days_of_month\": [\n \"\",\n \"\"\n ],\n \"start_date\": \"Now\",\n \"end_date\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/v2/scans/create", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "create" ] }, "description": "This endpoint allows you to create a new scan with specified parameters for a project. You can access the \"custom\" information in the body parameters from the Scanner details." }, "response": [ { "id": "a676d336-43d1-4cb4-8f14-45c77b14eef5", "name": "200", "originalRequest": { "method": "POST", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "body": { "mode": "raw", "raw": "{\n \"scanparams_id\": \"\",\n \"branch\": \"\",\n \"project\": \"\",\n \"tool_id\": \"\",\n \"meta_data\": \"\",\n \"pr\": {\n \"ok\": \"\",\n \"target\": \"\",\n \" pr_number\": \"\",\n \"no_decoration\": \"\"\n },\n \"custom\": {\n \"type\": \"\",\n \"params\": \"\"\n },\n \"fork_scan\": \"\",\n \"fork_source_branch\": \"\",\n \"override_fork_source_branch\": \"\",\n \"environment\": \"\",\n \"scheduled\": false,\n \"api_rrule\": {\n \"frequency\": \"\",\n \"interval\": \"\",\n \"count\": \"\",\n \"days_of_week\": [\n \"\",\n \"\"\n ],\n \"days_of_month\": [\n \"\",\n \"\"\n ],\n \"start_date\": \"Now\",\n \"end_date\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/v2/scans/create", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "create" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"event_id\": \"\",\n \"message\": \"\"\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-a676d336-43d1-4cb4-8f14-45c77b14eef5" }, { "id": "1da91058-d9ce-45f2-85f2-b70a22ae9a1e", "name": "400", "originalRequest": { "method": "POST", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "body": { "mode": "raw", "raw": "{\n \"scanparams_id\": \"\",\n \"branch\": \"\",\n \"project\": \"\",\n \"tool_id\": \"\",\n \"meta_data\": \"\",\n \"pr\": {\n \"ok\": \"\",\n \"target\": \"\",\n \" pr_number\": \"\",\n \"no_decoration\": \"\"\n },\n \"custom\": {\n \"type\": \"\",\n \"params\": \"\"\n },\n \"fork_scan\": \"\",\n \"fork_source_branch\": \"\",\n \"override_fork_source_branch\": \"\",\n \"environment\": \"\",\n \"scheduled\": false,\n \"api_rrule\": {\n \"frequency\": \"\",\n \"interval\": \"\",\n \"count\": \"\",\n \"days_of_week\": [\n \"\",\n \"\"\n ],\n \"days_of_month\": [\n \"\",\n \"\"\n ],\n \"start_date\": \"Now\",\n \"end_date\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/v2/scans/create", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "create" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\"\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-1da91058-d9ce-45f2-85f2-b70a22ae9a1e" } ], "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-f99f7947-3757-4489-b1e3-6a7d44fe6a44" } ], "id": "5c7d0e58-d83b-4dae-8f57-eb135e7c648b", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-5c7d0e58-d83b-4dae-8f57-eb135e7c648b" }, { "name": "failed", "item": [ { "name": "Get Failed Scans", "id": "38aec50a-8a71-4482-b438-98ef806625e6", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/failed?start=0&limit=30", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "failed" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" } ] }, "description": "This endpoint returns scans that failed." }, "response": [ { "id": "dab72754-9579-48da-a8c8-cc47b2541845", "name": "200", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/failed?start=0&limit=30", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "failed" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"start\": 0,\n \"limit\": 0,\n \"total\": 0,\n \"scans\": [\n {\n \"id\": \"\",\n \"tool\": \"\",\n \"scan_type\": \"\",\n \"project\": {\n \"id\": \"\"\n },\n \"finished_at\": \"\",\n \"started_at\": \"\",\n \"message\": \"\",\n \"scanparams\": {\n \"id\": \"\"\n }\n },\n {\n \"id\": \"\",\n \"tool\": \"\",\n \"scan_type\": \"\",\n \"project\": {\n \"id\": \"\"\n },\n \"finished_at\": \"\",\n \"started_at\": \"\",\n \"message\": \"\",\n \"scanparams\": {\n \"id\": \"\"\n }\n }\n ]\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-dab72754-9579-48da-a8c8-cc47b2541845" }, { "id": "03eaaf95-3cca-4252-aebb-c05f87618a03", "name": "400", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/failed?start=0&limit=30", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "failed" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\"\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-03eaaf95-3cca-4252-aebb-c05f87618a03" } ], "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-38aec50a-8a71-4482-b438-98ef806625e6" } ], "id": "74f67d9a-023d-4b6a-bfaf-defedd8f143b", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-74f67d9a-023d-4b6a-bfaf-defedd8f143b" }, { "name": "image", "item": [ { "name": "Image Scan", "id": "bcf8d2cc-b84d-4444-b551-255072e36b79", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"image\": \"\",\n \"branch\": \"\",\n \"project\": \"\",\n \"tool\": \"\",\n \"meta_data\": \"\",\n \"scheduled\": false,\n \"api_rrule\": {\n \"frequency\": \"\",\n \"interval\": \"\",\n \"count\": \"\",\n \"days_of_week\": [\n \"\",\n \"\"\n ],\n \"days_of_month\": [\n \"\",\n \"\"\n ],\n \"start_date\": \"Now\",\n \"end_date\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/v2/scans/image", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "image" ] }, "description": "This endpoint allows you to create a new scan for a container image with specified parameters for a project. The scan details and configurations are included in the request body." }, "response": [ { "id": "e98880a4-729d-4ce2-ab8d-1fa57a137d7d", "name": "200", "originalRequest": { "method": "POST", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "body": { "mode": "raw", "raw": "{\n \"image\": \"\",\n \"branch\": \"\",\n \"project\": \"\",\n \"tool\": \"\",\n \"meta_data\": \"\",\n \"scheduled\": false,\n \"api_rrule\": {\n \"frequency\": \"\",\n \"interval\": \"\",\n \"count\": \"\",\n \"days_of_week\": [\n \"\",\n \"\"\n ],\n \"days_of_month\": [\n \"\",\n \"\"\n ],\n \"start_date\": \"Now\",\n \"end_date\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/v2/scans/image", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "image" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"event_id\": \"\"\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-e98880a4-729d-4ce2-ab8d-1fa57a137d7d" }, { "id": "6df02510-385b-4fb0-8ec3-097bb5d00750", "name": "400", "originalRequest": { "method": "POST", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "body": { "mode": "raw", "raw": "{\n \"image\": \"\",\n \"branch\": \"\",\n \"project\": \"\",\n \"tool\": \"\",\n \"meta_data\": \"\",\n \"scheduled\": false,\n \"api_rrule\": {\n \"frequency\": \"\",\n \"interval\": \"\",\n \"count\": \"\",\n \"days_of_week\": [\n \"\",\n \"\"\n ],\n \"days_of_month\": [\n \"\",\n \"\"\n ],\n \"start_date\": \"Now\",\n \"end_date\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/v2/scans/image", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "image" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\"\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-6df02510-385b-4fb0-8ec3-097bb5d00750" } ], "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-bcf8d2cc-b84d-4444-b551-255072e36b79" } ], "id": "73c006c7-f039-406a-8033-ea07fe31b3e1", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-73c006c7-f039-406a-8033-ea07fe31b3e1" }, { "name": "import", "item": [ { "name": "Import Scan Result", "id": "12156cb5-b85e-4bd2-927c-23d8067d5a31", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"project\": \"\",\n \"branch\": \"\",\n \"tool\": \"\",\n \"target\": \"\",\n \"override-old-analyze\": \"\",\n \"meta_data\": \"\",\n \"fork-value\": \"\",\n \"override-fork-source\": \"\",\n \"fork-source\": \"\",\n \"environment\": \"\",\n \"file\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/v2/scans/import", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "import" ] }, "description": "This endpoint allows you to import scan results for a specified project. The scan details and configurations are included in the form parameters." }, "response": [ { "id": "a8931f85-3398-4a4c-8ac0-91560eee8b4e", "name": "200", "originalRequest": { "method": "POST", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "body": { "mode": "raw", "raw": "{\n \"project\": \"\",\n \"branch\": \"\",\n \"tool\": \"\",\n \"target\": \"\",\n \"override-old-analyze\": \"\",\n \"meta_data\": \"\",\n \"fork-value\": \"\",\n \"override-fork-source\": \"\",\n \"fork-source\": \"\",\n \"environment\": \"\",\n \"file\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/v2/scans/import", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "import" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"examples\": {\n \"Result\": {\n \"value\": \"{\\n\\t\\t\\\"event_id\\\": \\\"{eventID}\\\",\\n\\t\\t\\\"message\\\": \\\"scan results have been imported successfully\\\",\\n\\t}\"\n }\n }\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-a8931f85-3398-4a4c-8ac0-91560eee8b4e" }, { "id": "40e4d88a-ef5d-4b96-8e4d-4dd6d470d05f", "name": "400", "originalRequest": { "method": "POST", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "body": { "mode": "raw", "raw": "{\n \"project\": \"\",\n \"branch\": \"\",\n \"tool\": \"\",\n \"target\": \"\",\n \"override-old-analyze\": \"\",\n \"meta_data\": \"\",\n \"fork-value\": \"\",\n \"override-fork-source\": \"\",\n \"fork-source\": \"\",\n \"environment\": \"\",\n \"file\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/v2/scans/import", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "import" ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\"\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-40e4d88a-ef5d-4b96-8e4d-4dd6d470d05f" } ], "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-12156cb5-b85e-4bd2-927c-23d8067d5a31" } ], "id": "07ff0ef9-88b7-49f2-9a11-8ea521e856bb", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-07ff0ef9-88b7-49f2-9a11-8ea521e856bb" }, { "name": "imported", "item": [ { "name": "Get Imported Scans", "id": "991d7141-89cb-4cd7-be10-ac0d80a3200e", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/imported?start=0&limit=30", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "imported" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" } ] }, "description": "This endpoint returns scans that imported." }, "response": [ { "id": "b771391b-f7b3-4209-9536-7e4000bb69a9", "name": "200", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/imported?start=0&limit=30", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "imported" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"examples\": {\n \"Result\": {\n \"value\": \"{\\n \\\"start\\\": 0,\\n \\\"limit\\\": 1,\\n \\\"total\\\": 31,\\n \\\"scans\\\": [\\n {\\n \\\"id\\\": \\\"{scanID}\\\",\\n \\\"tool\\\": \\\"{toolName}\\\",\\n \\\"scan_type\\\": \\\"{scanType}\\\",\\n \\\"project\\\": {\\n \\\"id\\\": \\\"{projectID}\\\"\\n },\\n \\\"finished_at\\\": \\\"{time}\\\",\\n \\\"started_at\\\": \\\"{time}\\\",\\n \\\"scanparams\\\": {\\n \\\"id\\\": \\\"{scanparamID}\\\"\\n },\\n \\\"duration\\\": {durationMS}\\n }\\n ]\\n}\"\n }\n }\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-b771391b-f7b3-4209-9536-7e4000bb69a9" }, { "id": "5e302c4b-6f71-4065-8760-8d668aa8522f", "name": "400", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/imported?start=0&limit=30", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "imported" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\"\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-5e302c4b-6f71-4065-8760-8d668aa8522f" } ], "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-991d7141-89cb-4cd7-be10-ac0d80a3200e" } ], "id": "feecb194-0579-4e29-9c6b-a200c65ed0ef", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-feecb194-0579-4e29-9c6b-a200c65ed0ef" }, { "name": "queue", "item": [ { "name": "Get Scans in the Queue", "id": "edc34141-d043-4b9f-9a28-8e481a031ae7", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/queue?start=0&limit=30", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "queue" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" } ] }, "description": "This endpoint returns scans in the queue." }, "response": [ { "id": "81b3185e-216a-41d5-a8b9-8400eb0dca73", "name": "200", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/queue?start=0&limit=30", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "queue" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"examples\": {\n \"Result\": {\n \"value\": \"{\\n \\\"start\\\": 0,\\n \\\"limit\\\": 30,\\n \\\"total\\\": 1,\\n \\\"scans\\\": [\\n {\\n \\\"id\\\": \\\"{scanID}\\\",\\n \\\"tool\\\": \\\"{toolName}\\\",\\n \\\"stage\\\": \\\"{scanStage}\\\",\\n \\\"status\\\": \\\"{scanStatus}\\\",\\n \\\"scan_type\\\": \\\"{scanType}\\\",\\n \\\"message\\\": \\\"{message}\\\",\\n \\\"project\\\": {\\n \\\"id\\\": \\\"{projectID}\\\"\\n },\\n \\\"finished_at\\\": \\\"{time}\\\",\\n \\\"started_at\\\": \\\"{time}\\\",\\n \\\"scanparams\\\": {\\n \\\"id\\\": \\\"{scanparamsID}\\\"\\n },\\n \\\"duration\\\": {durationMS}\\n }\\n ]\\n}\"\n }\n }\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-81b3185e-216a-41d5-a8b9-8400eb0dca73" }, { "id": "d1e8524f-18eb-47ec-83f8-5685a3137116", "name": "400", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/queue?start=0&limit=30", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", "queue" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\"\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-d1e8524f-18eb-47ec-83f8-5685a3137116" } ], "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-edc34141-d043-4b9f-9a28-8e481a031ae7" } ], "id": "efad8af3-6f18-46f1-ad41-2608bc57d7a6", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-efad8af3-6f18-46f1-ad41-2608bc57d7a6" }, { "name": "{scan_id}", "item": [ { "name": "restart", "item": [ { "name": "Restart A Scan", "id": "12e674af-80d3-4f37-b2e1-f47a3781c671", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/:scan_id/restart", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", ":scan_id", "restart" ], "variable": [ { "id": "06ab8be3-6ef2-4c44-b5b8-7964729dcbcc", "key": "scan_id", "value": "{scan_id}", "description": "(Required) The ID of the scan to create a scan event." } ] }, "description": "This endpoint creates a scan event on Kondukto. To trigger a scan, the project should exist on Kondukto, and the scanner should be already configured." }, "response": [ { "id": "631bbd1d-5f81-4478-9b05-1e3dc2fefd41", "name": "200", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/:scan_id/restart", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", ":scan_id", "restart" ], "variable": [ { "key": "scan_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"event\": \"\",\n \"message\": \"\"\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-631bbd1d-5f81-4478-9b05-1e3dc2fefd41" }, { "id": "3eea639b-14fc-4b61-9032-42c573ef91a9", "name": "400", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/:scan_id/restart", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", ":scan_id", "restart" ], "variable": [ { "key": "scan_id" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\"\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-3eea639b-14fc-4b61-9032-42c573ef91a9" } ], "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-12e674af-80d3-4f37-b2e1-f47a3781c671" } ], "id": "3b7cccb3-72ab-4d4a-be22-6c6383079c12", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-3b7cccb3-72ab-4d4a-be22-6c6383079c12" }, { "name": "status", "item": [ { "name": "Get Scan Security Criteria", "id": "2836ec04-99ff-4415-8718-90252e7be2c9", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/:scan_id/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", ":scan_id", "status" ], "variable": [ { "id": "21b1b017-77bb-4047-8922-09ff4a9811e6", "key": "scan_id", "value": "{scan_id}", "description": "(Required) The ID of the scan to retrieve security criteria." } ] }, "description": "This endpoint returns the security criteria of a specific scan." }, "response": [ { "id": "f5c8f192-4aaa-406f-8187-3e0b1024a790", "name": "200", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/:scan_id/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", ":scan_id", "status" ], "variable": [ { "key": "scan_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"examples\": {\n \"Result\": {\n \"value\": \"{\\n \\\"scan_detail\\\": {\\n \\\"tool_type\\\": \\\"{toolType}\\\",\\n \\\"tool_name\\\": \\\"{toolName}\\\",\\n \\\"risk_score\\\": {riskScore},\\n \\\"summary\\\": {\\n \\\"low\\\": {low},\\n \\\"high\\\": {high},\\n \\\"medium\\\": {medium},\\n \\\"critical\\\": {critical}\\n }\\n },\\n \\\"security_gateway\\\": {securityGateway},\\n \\\"status\\\": {status}\\n}\"\n }\n }\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-f5c8f192-4aaa-406f-8187-3e0b1024a790" }, { "id": "fc8ef791-c185-436c-9b61-33b2c825491e", "name": "400", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/:scan_id/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", ":scan_id", "status" ], "variable": [ { "key": "scan_id" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\"\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-fc8ef791-c185-436c-9b61-33b2c825491e" } ], "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-2836ec04-99ff-4415-8718-90252e7be2c9" } ], "id": "bf628bb6-42e6-4d29-9aed-3bf33415b2d6", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-bf628bb6-42e6-4d29-9aed-3bf33415b2d6" }, { "name": "Get Scan Details", "id": "e4d308ba-def7-4e91-9a8d-d2da06dcdc60", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/:scan_id", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", ":scan_id" ], "variable": [ { "id": "0313a07d-314b-41a7-af8c-36fadd1e4399", "key": "scan_id", "value": "{scan_id}", "description": "(Required) The ID of the scan to retrieve details." } ] }, "description": "This endpoint returns scan details of the given scan." }, "response": [ { "id": "75362daa-fead-4ed3-bcc7-2a7be7f28688", "name": "200", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/:scan_id", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", ":scan_id" ], "variable": [ { "key": "scan_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"examples\": {\n \"Result\": {\n \"value\": \"{\\n \\\"id\\\": \\\"{ID}\\\",\\n \\\"name\\\": \\\"{name}\\\",\\n \\\"branch\\\": \\\"{branch}\\\",\\n \\\"scan_type\\\": \\\"{scanType}\\\",\\n \\\"meta_data\\\": \\\"metaData\\\",\\n \\\"tool\\\": \\\"{tool}\\\",\\n \\\"date\\\": \\\"{date}\\\",\\n \\\"project\\\": \\\"{project}\\\",\\n \\\"score\\\": {score},\\n \\\"summary\\\": {\\n \\\"low\\\": {low},\\n \\\"high\\\": {high},\\n \\\"medium\\\": {medium},\\n \\\"critical\\\": {critical}\\n },\\n \\\"links\\\": {\\n \\\"html\\\": \\\"{html_link}\\\"\\n }\\n}\"\n }\n }\n}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-75362daa-fead-4ed3-bcc7-2a7be7f28688" }, { "id": "6e88efa2-d65e-4b08-ab92-4d69eb2217de", "name": "400", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/scans/:scan_id", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "scans", ":scan_id" ], "variable": [ { "key": "scan_id" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{}", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-6e88efa2-d65e-4b08-ab92-4d69eb2217de" } ], "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-e4d308ba-def7-4e91-9a8d-d2da06dcdc60" } ], "id": "d4217044-11d6-40d0-872a-7bd378333808", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-d4217044-11d6-40d0-872a-7bd378333808" } ], "id": "126f330c-0d39-4548-99ad-3947f250e597", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-126f330c-0d39-4548-99ad-3947f250e597" } ], "id": "4a7ca5b5-009b-4682-8dd6-e64cf71111c3", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-4a7ca5b5-009b-4682-8dd6-e64cf71111c3" } ], "id": "2f277895-5a42-42f8-84a7-9b7bd16366dc", "createdAt": "2026-07-28T10:57:14.000Z", "updatedAt": "2026-07-28T10:57:14.000Z", "uid": "35240-2f277895-5a42-42f8-84a7-9b7bd16366dc" } ], "auth": { "type": "apikey", "apikey": [ { "key": "key", "value": "X-Cookie", "type": "string" }, { "key": "value", "value": "{{apiKey}}", "type": "string" }, { "key": "in", "value": "header", "type": "string" } ] }, "variable": [ { "key": "hostname", "value": "api.kondukto.io" }, { "key": "baseUrl", "value": "https://{{hostname}}" } ] }