# neo

- [Welcome to Neo](https://docs.neo.projectdiscovery.io/index.md)
- [Why Neo](https://docs.neo.projectdiscovery.io/essentials/why-neo.md): Security infrastructure that lets teams scale their operations with LLMs without building or maintaining the plumbing
- [Run your first workflow](https://docs.neo.projectdiscovery.io/essentials/quickstart.md)
- [Pentest](https://docs.neo.projectdiscovery.io/essentials/pentest.md): Long-running, contextual pentest: full recon through exploitation with real-world impact proof
- [Vuln triage](https://docs.neo.projectdiscovery.io/essentials/vuln-triage.md): Cut through noise: rank findings by true exploitability and blast radius
- [Code audit](https://docs.neo.projectdiscovery.io/essentials/code-audit.md): Exhaustive code review: full architecture mapping, data-flow tracing, and validation
- [Security & Privacy](https://docs.neo.projectdiscovery.io/concepts/security-privacy.md)
- [Bring Your Own VPC (On-Prem)](https://docs.neo.projectdiscovery.io/concepts/byo-vpc.md): Run Neo entirely inside your own infrastructure
- [Plans](https://docs.neo.projectdiscovery.io/concepts/plans.md): From a free start to enterprise scale: compare plans, understand usage, and manage your subscription.
- [Understanding Credits](https://docs.neo.projectdiscovery.io/concepts/cost.md): Understand how credits are consumed, how we keep costs low, and what your security workflows actually cost.
- [Support](https://docs.neo.projectdiscovery.io/concepts/support.md): How to get help with Neo on every plan, and the paid support options available to Enterprise teams, including PDCare.
- [Memory](https://docs.neo.projectdiscovery.io/concepts/memory.md): How Neo learns your environment and gets smarter over time
- [Sandboxes](https://docs.neo.projectdiscovery.io/concepts/sandboxes.md): Choose where Neo runs commands, tools, and workspace operations
- [Agent architecture](https://docs.neo.projectdiscovery.io/concepts/agent-architecture.md): How Neo's orchestrator and specialized subagents coordinate to run complex security assessments
- [Scheduling](https://docs.neo.projectdiscovery.io/concepts/scheduling.md): Run security tasks on a schedule with full agent capabilities, memory, and credential access
- [Secrets](https://docs.neo.projectdiscovery.io/concepts/secrets.md): Encrypted credential management for authenticated security testing
- [Environment Variables](https://docs.neo.projectdiscovery.io/concepts/env-vars.md): Configure credentials and endpoints so Neo can connect to your tools and services
- [Hooks](https://docs.neo.projectdiscovery.io/concepts/hooks.md): Standing rules Neo cannot talk itself out of, enforced on every matching call
- [Skills](https://docs.neo.projectdiscovery.io/concepts/skills.md): Domain-specific knowledge guides that turn agents into specialists
- [Verification](https://docs.neo.projectdiscovery.io/concepts/verification.md): How Neo independently proves every finding before it reaches your team
- [Reading Results in Neo](https://docs.neo.projectdiscovery.io/concepts/results.md): Everything a task produces, where it lives, how to shape it, and how it reaches the tools your team already uses.
- [Tasks and Modes](https://docs.neo.projectdiscovery.io/platform/tasks-and-modes.md): The fundamental unit of work in Neo, and how to control the depth of execution
- [Projects](https://docs.neo.projectdiscovery.io/platform/projects.md): Organize tasks, issues, files, and team members around a shared security objective
- [Autopilot](https://docs.neo.projectdiscovery.io/platform/autopilot.md): Let Neo run a project on a schedule, deciding what to work on next from everything the project has learned
- [Issues](https://docs.neo.projectdiscovery.io/platform/issues.md): A persistent vulnerability database that gets smarter with every run
- [Automations](https://docs.neo.projectdiscovery.io/platform/automations.md): Schedule tasks to run automatically on a recurring or one-time basis
- [Secrets](https://docs.neo.projectdiscovery.io/platform/settings/secrets.md): Store credentials and tokens that Neo agents can use during tasks
- [Prompt Library](https://docs.neo.projectdiscovery.io/platform/prompt-library.md): Save, organize, and reuse prompts across tasks and your team
- [Overview](https://docs.neo.projectdiscovery.io/platform/agents.md): Specialized agents that power Neo tasks, and tools to build your own
- [Planner Agent](https://docs.neo.projectdiscovery.io/platform/agents/orchestration/planner.md): Strategic planning agent that gathers intelligence and builds execution plans before action is taken
- [Agent Swarm](https://docs.neo.projectdiscovery.io/platform/agents/orchestration/agent-swarm.md): Orchestration agent that coordinates specialized agents in parallel for complex, multi-phase assessments
- [Recon Agent](https://docs.neo.projectdiscovery.io/platform/agents/discovery/recon-agent.md): Passive target intelligence and asset discovery using ProjectDiscovery tools
- [ProjectDiscovery Agent](https://docs.neo.projectdiscovery.io/platform/agents/discovery/projectdiscovery-agent.md): Asset discovery and intelligence using ProjectDiscovery Cloud Platform
- [Research Agent](https://docs.neo.projectdiscovery.io/platform/agents/discovery/research-agent.md): Cybersecurity intelligence gathering, CVE analysis, and real-time threat research
- [CVE Intelligence Agent](https://docs.neo.projectdiscovery.io/platform/agents/discovery/cve-intelligence-agent.md): CVE research, exploit intelligence, and vulnerability database analysis
- [Explore Agent](https://docs.neo.projectdiscovery.io/platform/agents/discovery/explore-agent.md): Pre-execution intelligence gathering and target reconnaissance for the Planner
- [Sandbox Agent](https://docs.neo.projectdiscovery.io/platform/agents/testing/sandbox-agent.md): Primary execution agent for hands-on security testing inside an isolated sandbox environment
- [Browser Agent](https://docs.neo.projectdiscovery.io/platform/agents/testing/browser-agent.md): Real browser automation for DOM-based testing, authenticated flows, and visual verification
- [API Security Agent](https://docs.neo.projectdiscovery.io/platform/agents/testing/api-security-agent.md): API discovery and security testing with OpenAPI and Swagger support
- [XSS Agent](https://docs.neo.projectdiscovery.io/platform/agents/testing/xss-agent.md): Cross-site scripting detection, context analysis, and blind XSS testing
- [Red Team Operator](https://docs.neo.projectdiscovery.io/platform/agents/testing/red-team-operator.md): Authorized adversary simulation and internal penetration testing with scope-aware execution
- [Android Security Agent](https://docs.neo.projectdiscovery.io/platform/agents/testing/android-security-agent.md): Adaptive Android penetration testing on cloud-hosted rooted devices with Frida instrumentation
- [iOS Security Agent](https://docs.neo.projectdiscovery.io/platform/agents/testing/ios-deep-security-agent.md): Advanced iOS security testing with jailbroken device access and deep Frida instrumentation
- [Ghidra Agent](https://docs.neo.projectdiscovery.io/platform/agents/testing/ghidra-agent.md): Binary reverse engineering and vulnerability research powered by GhidraMCP
- [Deploy Agent](https://docs.neo.projectdiscovery.io/platform/agents/testing/deploy-agent.md): On-demand container orchestration for spinning up target applications and test environments
- [Vuln Triage Agent](https://docs.neo.projectdiscovery.io/platform/agents/analysis/vuln-triage-agent.md): Source-agnostic vulnerability triage for reports, advisories, scanner imports, and manual input
- [GitHub Review Agent](https://docs.neo.projectdiscovery.io/platform/agents/analysis/github-review-agent.md): Automated security-focused pull request review with inline finding comments
- [Verification Agent](https://docs.neo.projectdiscovery.io/platform/agents/analysis/verification-agent.md): Post-execution judge that validates findings, re-tests independently, and files confirmed issues
- [Summarizing Agent](https://docs.neo.projectdiscovery.io/platform/agents/analysis/summarizing-agent.md): Output condensation utility that surfaces security-relevant content from large tool outputs
- [Custom Agents](https://docs.neo.projectdiscovery.io/platform/agents/custom-agents.md): Build agents tailored to your environment, workflows, and security objectives
- [Team-shared custom agents](https://docs.neo.projectdiscovery.io/platform/agents/team-shared-custom-agents.md): Share custom agents with your Neo team and install agents shared by teammates
- [Community Agents](https://docs.neo.projectdiscovery.io/platform/agents/community-agents.md): Discover and remix agents built by the security community
- [Overview](https://docs.neo.projectdiscovery.io/platform/tools.md): The capabilities Neo agents use to do real work, from pre-installed security binaries to tools you build yourself
- [Pre-installed Tools](https://docs.neo.projectdiscovery.io/platform/tools/pre-installed-tools.md): The security toolchain included with Neo-managed and Docker-confined sandboxes
- [MCP Tools](https://docs.neo.projectdiscovery.io/platform/tools/mcp-tools.md): External tools connected to Neo agents over the Model Context Protocol
- [Purpose-built Tools](https://docs.neo.projectdiscovery.io/platform/tools/purpose-built-tools.md): Over 40 native tools designed by ProjectDiscovery to handle the mechanical parts of security work
- [Custom Tools](https://docs.neo.projectdiscovery.io/platform/tools/custom-tools.md): Tools you write yourself to wrap internal APIs, proprietary tooling, and repeatable team workflows
- [Team-shared custom toolkits](https://docs.neo.projectdiscovery.io/platform/tools/team-shared-custom-toolkits.md): Share custom toolkits with your Neo team and control which credentials they use
- [Team](https://docs.neo.projectdiscovery.io/platform/settings/team.md): Invite teammates, assign roles, and manage who has access to your workspace
- [Models](https://docs.neo.projectdiscovery.io/platform/settings/models.md): Choose which AI model powers your Neo tasks
- [Install a self-hosted sandbox](https://docs.neo.projectdiscovery.io/platform/settings/sandboxes.md): Install, secure, and manage a sandbox on infrastructure you control
- [BYOK](https://docs.neo.projectdiscovery.io/platform/settings/byok.md): Bring your own LLM provider API keys to Neo
- [API Key](https://docs.neo.projectdiscovery.io/platform/settings/api-key.md): Authenticate programmatic access to Neo using your API key
- [VPN](https://docs.neo.projectdiscovery.io/platform/settings/vpn.md): Connect Neo to your internal network for testing private targets
- [SSH Connections](https://docs.neo.projectdiscovery.io/concepts/ssh-connections.md): Run commands on remote hosts you control
- [Egress IP](https://docs.neo.projectdiscovery.io/platform/settings/egress-ip.md): Outbound IP addresses for allowlist configuration
- [Notifications](https://docs.neo.projectdiscovery.io/platform/settings/notifications.md): Configure how Neo reaches you for task updates and follow-up questions
- [Audit Logs](https://docs.neo.projectdiscovery.io/platform/settings/audit-logs.md): A complete, searchable record of every action taken in your team
- [API Reference](https://docs.neo.projectdiscovery.io/api-reference/overview.md): Programmatic access to the Neo platform for automation, integration, and custom workflows.
- [Revoke a native Linear connection by organization](https://docs.neo.projectdiscovery.io/api-reference/integrations/revoke-a-native-linear-connection-by-organization.md)
- [Check whether this deployment owns a provider identity](https://docs.neo.projectdiscovery.io/api-reference/integrations/check-whether-this-deployment-owns-a-provider-identity.md)
- [Connect a toolkit](https://docs.neo.projectdiscovery.io/api-reference/integrations/connect-a-toolkit.md): Start the OAuth or API-key connect flow for a toolkit.
- [Disconnect a toolkit](https://docs.neo.projectdiscovery.io/api-reference/integrations/disconnect-a-toolkit.md): Disconnect a connected account.
- [Get active integration provider](https://docs.neo.projectdiscovery.io/api-reference/integrations/get-active-integration-provider.md): Returns which integration provider is active and whether it is configured.
- [List integration toolkits](https://docs.neo.projectdiscovery.io/api-reference/integrations/list-integration-toolkits.md): List all available toolkits with per-user connection status.
- [Get auth schemes for a toolkit](https://docs.neo.projectdiscovery.io/api-reference/integrations/get-auth-schemes-for-a-toolkit.md): Get available authentication methods for a toolkit.
- [Get toolkit config options](https://docs.neo.projectdiscovery.io/api-reference/integrations/get-toolkit-config-options.md): Fetch provider-specific configuration options (projects, teams, repos, statuses, etc.) from the connected account.
- [Create a toolkit config](https://docs.neo.projectdiscovery.io/api-reference/integrations/create-a-toolkit-config.md): Save a new provider configuration entry.
- [List saved toolkit configs](https://docs.neo.projectdiscovery.io/api-reference/integrations/list-saved-toolkit-configs.md): List all saved configurations for a toolkit.
- [Update a toolkit config](https://docs.neo.projectdiscovery.io/api-reference/integrations/update-a-toolkit-config.md): Update an existing provider configuration entry by ID.
- [Delete a toolkit config](https://docs.neo.projectdiscovery.io/api-reference/integrations/delete-a-toolkit-config.md): Delete a provider configuration entry by ID.
- [Look up user region and team (US only)](https://docs.neo.projectdiscovery.io/api-reference/look-up-user-region-and-team-us-only.md)
- [Register or resolve a user region (US only)](https://docs.neo.projectdiscovery.io/api-reference/register-or-resolve-a-user-region-us-only.md)
- [Read local accepted team membership](https://docs.neo.projectdiscovery.io/api-reference/read-local-accepted-team-membership.md)
- [List available agents](https://docs.neo.projectdiscovery.io/api-reference/agents/list-available-agents.md): Defaults to built-in agents, your own custom agents, and accessible team-shared agents. Public discovery remains on /api/v1/agents/directory. Shared custom agents include their UUID for directory detail and installation; install an agent before using its slug in a task.
- [List user agents](https://docs.neo.projectdiscovery.io/api-reference/agents/list-user-agents.md): List all agents created by the current user
- [Create user agent](https://docs.neo.projectdiscovery.io/api-reference/agents/create-user-agent.md): Create a new custom agent for the current user. Each user may have up to 50 custom agents.
- [Get user agent](https://docs.neo.projectdiscovery.io/api-reference/agents/get-user-agent.md): Get details of a specific user agent
- [Delete user agent](https://docs.neo.projectdiscovery.io/api-reference/agents/delete-user-agent.md): Delete a user agent.
- [Update user agent](https://docs.neo.projectdiscovery.io/api-reference/agents/update-user-agent.md): Update an existing user agent
- [Update agent visibility](https://docs.neo.projectdiscovery.io/api-reference/agents/update-agent-visibility.md): Update an owned agent to private, public, unlisted, or team visibility. Team sharing automatically uses the owner's current team and requires active membership. Installed forks remain independent private copies.
- [Get agent details](https://docs.neo.projectdiscovery.io/api-reference/agents/get-agent-details.md): Get detailed information about a specific agent (native or user).
- [List shared agents from directory](https://docs.neo.projectdiscovery.io/api-reference/agent-directory/list-shared-agents-from-directory.md): Browse public agents and, when authenticated, agents shared with your teams. Supports pagination, visibility, tag, and text search filters.
- [Get shared agent details from directory](https://docs.neo.projectdiscovery.io/api-reference/agent-directory/get-shared-agent-details-from-directory.md): Get full details of a public or unlisted agent, or a team agent shared with a team you belong to.
- [Install (fork) a shared agent from directory](https://docs.neo.projectdiscovery.io/api-reference/agent-directory/install-fork-a-shared-agent-from-directory.md): Install a public, unlisted, or accessible team agent by its UUID as an independent private copy. The agent will be installed with the same agent_id but owned by the current user.
- [Check pre-installation requirements](https://docs.neo.projectdiscovery.io/api-reference/agent-directory/check-pre-installation-requirements.md): Check if the current user can install an agent by its UUID. Returns information about required environment variables, packages, and estimated installation time.
- [Attach a toolkit to a dynamic subagent](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/attach-a-toolkit-to-a-dynamic-subagent.md): Scopes the subagent's catalog to the attached toolkit AND inlines its tools' full schemas in runtime context.
- [Detach a toolkit from a dynamic subagent](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/detach-a-toolkit-from-a-dynamic-subagent.md)
- [Attach a single tool to a dynamic subagent](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/attach-a-single-tool-to-a-dynamic-subagent.md)
- [Detach a tool from a dynamic subagent](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/detach-a-tool-from-a-dynamic-subagent.md)
- [List user toolkits](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/list-user-toolkits.md): List owned and authorized team-shared toolkits, including credential readiness.
- [Create a new toolkit](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/create-a-new-toolkit.md)
- [Get toolkit details](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/get-toolkit-details.md)
- [Soft-delete a toolkit and its tools](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/soft-delete-a-toolkit-and-its-tools.md)
- [Update a toolkit (partial)](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/update-a-toolkit-partial.md): Updates non-runtime fields. Runtime changes (deps, init, env vars) require the agent meta-tools to also force a runner reload.
- [Revoke team toolkit sharing](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/revoke-team-toolkit-sharing.md): The owner or an active team admin can revoke access. Saved secrets are retained.
- [Configure team toolkit sharing](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/configure-team-toolkit-sharing.md): The owner can share a toolkit with one team or update its credential settings. The caller’s active team is resolved server-side. Omitted fields retain their current values. Initial sharing requires credential_mode. A supplied secret_bindings map replaces all bindings; switching to personal mode clea…
- [List user dynamic tools](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/list-user-dynamic-tools.md)
- [Create a new dynamic tool](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/create-a-new-dynamic-tool.md): If toolkit_id is omitted, the tool goes in the user's auto-managed "global" toolkit.
- [Get dynamic tool details](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/get-dynamic-tool-details.md)
- [Soft-delete a dynamic tool](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/soft-delete-a-dynamic-tool.md)
- [Update a dynamic tool (partial)](https://docs.neo.projectdiscovery.io/api-reference/dynamic-tools/update-a-dynamic-tool-partial.md)
- [List AI connections](https://docs.neo.projectdiscovery.io/api-reference/ai-connections/list-ai-connections.md): Lists the caller's personal connections and individual connections shared by active teammates, including whether each can route a Neo task.
- [Submit a provider callback URL from a browser sign-in](https://docs.neo.projectdiscovery.io/api-reference/ai-connections/submit-a-provider-callback-url-from-a-browser-sign-in.md): Completes a browser sign-in using the callback URL received from the provider. A callback session is bound to its initiating user and only one submission can be in flight at a time.
- [Start an AI provider sign-in](https://docs.neo.projectdiscovery.io/api-reference/ai-connections/start-an-ai-provider-sign-in.md): Creates a short-lived, user-bound sign-in session for the requested provider. The returned flow determines whether the client opens a browser URL or presents a device code. Providers advertised with the setup_token flow, including Claude, are rejected by this endpoint.
- [Get AI provider sign-in status](https://docs.neo.projectdiscovery.io/api-reference/ai-connections/get-ai-provider-sign-in-status.md): Polls a user-bound sign-in session until it succeeds, fails, or expires. Successful sessions are removed after activation.
- [List providers available for AI connections](https://docs.neo.projectdiscovery.io/api-reference/ai-connections/list-providers-available-for-ai-connections.md): Requires the `ai_connections` feature flag for the current user.
- [Connect Claude using a setup token](https://docs.neo.projectdiscovery.io/api-reference/ai-connections/connect-claude-using-a-setup-token.md): Connects a personal Claude account using a long-lived token created by `claude setup-token`. Connecting the account does not change the selected model source. The token is never shared with the user's team.
- [Delete an AI connection](https://docs.neo.projectdiscovery.io/api-reference/ai-connections/delete-an-ai-connection.md): Removes one personal AI connection. Removing the final connection explicitly resets the selected model source to Neo. If any account remains, the selected source is preserved even when none are usable.
- [Change an AI connection's visibility](https://docs.neo.projectdiscovery.io/api-reference/ai-connections/change-an-ai-connections-visibility.md): The connection owner may opt in to sharing one connection with their current team, or return it to private visibility.
- [List the caller's audit logs](https://docs.neo.projectdiscovery.io/api-reference/audit-logs/list-the-callers-audit-logs.md)
- [List audit logs for the caller's current team](https://docs.neo.projectdiscovery.io/api-reference/audit-logs/list-audit-logs-for-the-callers-current-team.md): Requires accepted admin membership in the caller's current team and a team plan that includes audit logs.
- [Get credit balance](https://docs.neo.projectdiscovery.io/api-reference/billing/get-credit-balance.md): Returns the current credit balance, usage, and expiry for the authenticated user or their team.
- [List billing invoices](https://docs.neo.projectdiscovery.io/api-reference/billing/list-billing-invoices.md): Returns a list of Stripe invoices for the authenticated user's Stripe customer. Includes all credit purchase invoices.
- [List subscription plans](https://docs.neo.projectdiscovery.io/api-reference/billing/list-subscription-plans.md): Returns the per-seat plan tiers with monthly/annual pricing and max seats.
- [Create Stripe Customer Portal session](https://docs.neo.projectdiscovery.io/api-reference/billing/create-stripe-customer-portal-session.md): Creates a Stripe Customer Portal session for managing payment methods. Requires an existing Stripe customer ID.
- [Redeem an event promo code](https://docs.neo.projectdiscovery.io/api-reference/billing/redeem-an-event-promo-code.md): Redeems a single-use event promo code (Black Hat / DEF CON), adding its credits to the caller's balance and attributing the account to the code's source. Credits expire after a fixed window from redemption and are added to the existing balance, never replacing it. Team members credit the shared team…
- [Purchase credits](https://docs.neo.projectdiscovery.io/api-reference/billing/purchase-credits.md): Buy Neo credits. First purchase redirects to Stripe Checkout (saves payment method). Subsequent purchases charge the saved payment method directly. Credits are added to the existing balance with a rolling 1-year expiry.
- [Get subscription billing overview](https://docs.neo.projectdiscovery.io/api-reference/billing/get-subscription-billing-overview.md): Returns the current subscription, both credit bucket breakdowns (monthly subscription credits + top-up credits), per-user usage for the current period, payment methods, next charge, and any scheduled change.
- [Cancel a subscription](https://docs.neo.projectdiscovery.io/api-reference/billing/cancel-a-subscription.md): Cancels at period end (cancel_at_period_end=true). Credits remain until the cycle ends.
- [Start or estimate a subscription](https://docs.neo.projectdiscovery.io/api-reference/billing/start-or-estimate-a-subscription.md): Creates the first per-seat subscription (collection_method=charge_automatically). With no saved card, returns a Stripe Checkout redirect; with a saved card, creates the subscription and charges the first invoice immediately. The "estimate" action returns pricing only.
- [Get subscription checkout session status](https://docs.neo.projectdiscovery.io/api-reference/billing/get-subscription-checkout-session-status.md): Returns the status of a subscription Checkout Session (used by the Embedded Checkout return page). Includes whether the resource's subscription is now active (provisioning is webhook-async).
- [Clear pending subscription changes](https://docs.neo.projectdiscovery.io/api-reference/billing/clear-pending-subscription-changes.md): Cancels any scheduled (deferred) plan change - a downgrade or billing-cycle switch - by releasing the Stripe subscription schedule, reverting the subscription to its current plan. Does not affect a pending cancellation (cancel_at_period_end).
- [Preview a subscription change](https://docs.neo.projectdiscovery.io/api-reference/billing/preview-a-subscription-change.md): Dry-run cost breakdown for a seat/tier/interval change via Stripe proration preview.
- [Buy extra credits on an active subscription](https://docs.neo.projectdiscovery.io/api-reference/billing/buy-extra-credits-on-an-active-subscription.md): Buys additional credits for an active subscription as a one-off invoice tied to the subscription. Charges the saved card immediately and feeds the top-up bucket. Distinct from /billing/purchase (standalone purchases).
- [Update a subscription](https://docs.neo.projectdiscovery.io/api-reference/billing/update-a-subscription.md): Applies a seat/tier/interval change. Usage-model same-interval upgrades charge the full configured price delta and take effect only after successful payment; downgrades and billing-cycle switches are scheduled for renewal. Legacy subscriptions retain their existing credit behavior.
- [Complete the managed challenge for a pending Free entitlement](https://docs.neo.projectdiscovery.io/api-reference/billing/complete-the-managed-challenge-for-a-pending-free-entitlement.md)
- [Resolve or create the authenticated user's Free entitlement](https://docs.neo.projectdiscovery.io/api-reference/billing/resolve-or-create-the-authenticated-users-free-entitlement.md): Eligible users receive Free immediately without browser verification. Soft risk signals are retained for audit, not challenged. Paid history, disposable email and prior successful device/cookie grants still deny Free. Replaying an ungranted challenge-pending claim rechecks eligibility and device own…
- [Get the connected password-manager integration](https://docs.neo.projectdiscovery.io/api-reference/browser/get-the-connected-password-manager-integration.md): Return the status of the password-manager integration (e.g. 1Password) connected for the authenticated user. Connected means a service account token is stored (encrypted) in the user's secret manager; browser automations use it to log in and complete 2FA with the stored credentials.
- [Connect or rotate a password-manager integration](https://docs.neo.projectdiscovery.io/api-reference/browser/connect-or-rotate-a-password-manager-integration.md): Connect a password-manager integration (currently 1Password) by providing a service account token, or rotate the token of an existing integration. The token is validated (by listing the vaults it can access) and then stored encrypted in the user's secret manager. During browser automation logins the…
- [Disconnect the password-manager integration](https://docs.neo.projectdiscovery.io/api-reference/browser/disconnect-the-password-manager-integration.md): Disconnect the password-manager integration for the authenticated user by deleting the stored token from the secret manager. Browser automations will no longer be able to auto-login using the stored credentials. Idempotent.
- [Validate the connected password-manager integration](https://docs.neo.projectdiscovery.io/api-reference/browser/validate-the-connected-password-manager-integration.md): Re-validate the stored token by listing the vaults it can access. Useful to confirm the token still works after rotation on the provider side.
- [List browser sessions](https://docs.neo.projectdiscovery.io/api-reference/browser/list-browser-sessions.md): List the authenticated user's browser sessions.
- [Create a standalone browser session](https://docs.neo.projectdiscovery.io/api-reference/browser/create-a-standalone-browser-session.md): Create a standalone browser session the user can log into interactively (no task thread required).
- [Delete a browser session](https://docs.neo.projectdiscovery.io/api-reference/browser/delete-a-browser-session.md): Remove a browser session: release its cloud provider session if it has one (Kernel delete also persists the session's profile state), tear down its agent-browser daemon (if any), and delete its sandbox-resident manifest so it disappears from the listing. Used by the UI standalone browser manager to…
- [Rename a browser session](https://docs.neo.projectdiscovery.io/api-reference/browser/rename-a-browser-session.md): Update a browser session's user-assigned display label, persisted in its sandbox-resident manifest so it survives across listings. Used by the UI standalone browser manager to relabel a session (e.g. name one "Claimflow admin" and another "Claimflow user"). Applies to any session (cloud or local); n…
- [Attach to a browser session](https://docs.neo.projectdiscovery.io/api-reference/browser/attach-to-a-browser-session.md): Authorize access to a browser session's live stream / control channel.
- [Execute a command against a browser session](https://docs.neo.projectdiscovery.io/api-reference/browser/execute-a-command-against-a-browser-session.md): Run a single agent-browser command (navigate, back/forward, screenshot, tab management, storage/cookies, evaluate, ...) against an existing session daemon and return its verbatim result envelope. This is the control surface behind the standalone browser dashboard.
- [Save a browser session's auth state into its profile](https://docs.neo.projectdiscovery.io/api-reference/browser/save-a-browser-sessions-auth-state-into-its-profile.md): Persist the session's captured auth state (cookies, local storage) into its resource-scoped cloud profile immediately, so other sessions for the same resource can start from it without waiting for this session to be deleted or expire.
- [Capture a browser session's open tabs into its manifest](https://docs.neo.projectdiscovery.io/api-reference/browser/capture-a-browser-sessions-open-tabs-into-its-manifest.md): Persist the session's open-tab working set (URLs, titles, active tab) into its sandbox-resident manifest. Used at task handoff and while the user has the session open, so a cloud session that resumes to about:blank can be restored to the tabs the user actually had open.
- [List custom endpoints](https://docs.neo.projectdiscovery.io/api-reference/byok/list-custom-endpoints.md): List the custom OpenAI-compatible endpoints of the current user or team, oldest first. The API key is never returned.
- [Add a custom endpoint](https://docs.neo.projectdiscovery.io/api-reference/byok/add-a-custom-endpoint.md): Add a custom OpenAI-compatible endpoint (public HTTPS only). The base URL is normalised and validated with the key before saving; the key is encrypted at rest and never returned.
- [Validate a custom endpoint](https://docs.neo.projectdiscovery.io/api-reference/byok/validate-a-custom-endpoint.md): Validate a base URL and key without saving them. Rate limited per user (429 `rate_limited`), sharing one budget with create and with a key or URL change. The result carries the normalised base URL (the corrected one after a `/v1` retry), the listed model IDs, and on failure one coarse code; no upstr…
- [Delete a custom endpoint](https://docs.neo.projectdiscovery.io/api-reference/byok/delete-a-custom-endpoint.md): Delete one custom endpoint of the current user or team. An endpoint of another account is 404.
- [Update a custom endpoint](https://docs.neo.projectdiscovery.io/api-reference/byok/update-a-custom-endpoint.md): Update a custom endpoint's name, base URL, key or manual models. A changed `base_url` needs `api_key` in the same request (400 `custom_endpoint_key_required`): a stored key is never sent to a new URL. A new key or URL is validated before saving, with the same codes as create. A key or URL changed by…
- [Set model use mode](https://docs.neo.projectdiscovery.io/api-reference/byok/set-model-use-mode.md): Deprecated: use `PUT /api/v1/model-source`.
- [List BYOK provider keys](https://docs.neo.projectdiscovery.io/api-reference/byok/list-byok-provider-keys.md): List all configured BYOK provider API keys for the current user or team.
- [Delete a BYOK provider key](https://docs.neo.projectdiscovery.io/api-reference/byok/delete-a-byok-provider-key.md): Delete the API key for a specific provider. If this is the last remaining provider key, the system automatically switches the model use mode back to "neo".
- [Create or update a BYOK provider key](https://docs.neo.projectdiscovery.io/api-reference/byok/create-or-update-a-byok-provider-key.md): Create or update an API key for a specific provider. The key is encrypted at rest and validated against the provider's API before saving.
- [Validate a BYOK provider key](https://docs.neo.projectdiscovery.io/api-reference/byok/validate-a-byok-provider-key.md): Validate an API key against a provider without saving it. Useful for checking if a key is valid before committing.
- [List user files](https://docs.neo.projectdiscovery.io/api-reference/files/list-user-files.md): List all files in the user's workspace with optional filtering, search, and pagination.
- [Update file content](https://docs.neo.projectdiscovery.io/api-reference/files/update-file-content.md): Replace file content with new data.
- [Upload file](https://docs.neo.projectdiscovery.io/api-reference/files/upload-file.md): Upload a file to the user's workspace.
- [Browse files by directory](https://docs.neo.projectdiscovery.io/api-reference/files/browse-files-by-directory.md): Browser-style file listing with directory navigation support.
- [Get file content](https://docs.neo.projectdiscovery.io/api-reference/files/get-file-content.md): Stream file content by key. Proxies the request to the sandbox and returns the raw file bytes with appropriate content-type header.
- [Delete file(s)](https://docs.neo.projectdiscovery.io/api-reference/files/delete-files.md): Delete one or more files.
- [Move/rename file](https://docs.neo.projectdiscovery.io/api-reference/files/moverename-file.md): Move or rename a file to a new path.
- [Get shared file content](https://docs.neo.projectdiscovery.io/api-reference/files/get-shared-file-content.md): Stream the content of a publicly shared file. No authentication required — the token itself acts as the access control.
- [Rebuild file index](https://docs.neo.projectdiscovery.io/api-reference/files/rebuild-file-index.md): Start an asynchronous re-scan of the sandbox workspace, or a scoped workspace directory, and rebuild the SQLite-backed file metadata index.
- [Create or get public share](https://docs.neo.projectdiscovery.io/api-reference/files/create-or-get-public-share.md): Creates a new public share URL for a file, or returns the existing one if already shared. The URL is persistent and does not expire.
- [Revoke public share](https://docs.neo.projectdiscovery.io/api-reference/files/revoke-public-share.md): Revokes the public share for a file, making the public URL inaccessible. Use sandbox=legacy to revoke a share created before Free personal shares had separate storage keys.
- [Regenerate share token](https://docs.neo.projectdiscovery.io/api-reference/files/regenerate-share-token.md): Regenerates (rotates) the public share token for a file, invalidating the old URL and creating a new one. Use sandbox=legacy to rotate a share created before Free personal shares had separate storage keys.
- [Get GitHub account status](https://docs.neo.projectdiscovery.io/api-reference/github/get-github-account-status.md): Check if the current user has connected their GitHub account via OAuth.
- [Disconnect GitHub account](https://docs.neo.projectdiscovery.io/api-reference/github/disconnect-github-account.md): Disconnect the GitHub account from the current user's profile.
- [List GitHub installations](https://docs.neo.projectdiscovery.io/api-reference/github/list-github-installations.md): List all GitHub App installations claimed by the current user.
- [Claim GitHub installation](https://docs.neo.projectdiscovery.io/api-reference/github/claim-github-installation.md): Claim an unclaimed GitHub App installation. Requires GitHub OAuth to be connected first.
- [Get installation activity feed](https://docs.neo.projectdiscovery.io/api-reference/github/get-installation-activity-feed.md): Get recent task activity for an installation, ordered by most recent first.
- [Get org-wide config defaults](https://docs.neo.projectdiscovery.io/api-reference/github/get-org-wide-config-defaults.md): Get default configuration for an organization/installation.
- [Reset org-wide config defaults](https://docs.neo.projectdiscovery.io/api-reference/github/reset-org-wide-config-defaults.md): Reset org config defaults to empty (inherit system defaults).
- [Update org-wide config defaults](https://docs.neo.projectdiscovery.io/api-reference/github/update-org-wide-config-defaults.md): Update default configuration for an organization/installation. These apply to all repos unless overridden.
- [Get aggregated metadata for all repos in an installation](https://docs.neo.projectdiscovery.io/api-reference/github/get-aggregated-metadata-for-all-repos-in-an-installation.md): Fetch labels, branches, and collaborators aggregated across all repositories in an installation from the GitHub API.
- [List repositories for an installation](https://docs.neo.projectdiscovery.io/api-reference/github/list-repositories-for-an-installation.md): List repositories for a GitHub App installation with optional search.
- [GitHub OAuth callback](https://docs.neo.projectdiscovery.io/api-reference/github/github-oauth-callback.md): Handle the GitHub OAuth callback. Redirects to the app with success or error status. Security is handled via the OAuth state cookie.
- [Initiate GitHub OAuth](https://docs.neo.projectdiscovery.io/api-reference/github/initiate-github-oauth.md): Get a redirect URL to start the GitHub OAuth flow for connecting the user's GitHub account.
- [Search pull requests across repositories](https://docs.neo.projectdiscovery.io/api-reference/github/search-pull-requests-across-repositories.md): Search pull requests across all repositories in an installation, enriched with Neo review data.
- [Get repository configuration](https://docs.neo.projectdiscovery.io/api-reference/github/get-repository-configuration.md): Get full PR review configuration for a specific repository.
- [Update repository configuration](https://docs.neo.projectdiscovery.io/api-reference/github/update-repository-configuration.md): Update PR review settings for a specific repository.
- [Reset repo config overrides](https://docs.neo.projectdiscovery.io/api-reference/github/reset-repo-config-overrides.md): Clear all repo-level config overrides. The repo will inherit org-level defaults.
- [Get repository metadata from GitHub](https://docs.neo.projectdiscovery.io/api-reference/github/get-repository-metadata-from-github.md): Fetch labels, branches, and collaborators for a repository from the GitHub API.
- [List pull requests for a repository](https://docs.neo.projectdiscovery.io/api-reference/github/list-pull-requests-for-a-repository.md): Pull requests Neo has reviewed, with its review data. Pass source=github to list what is actually on the repository instead, including pull requests Neo has never seen.
- [Get a single pull request](https://docs.neo.projectdiscovery.io/api-reference/github/get-a-single-pull-request.md): Fetch a single pull request by number from GitHub.
- [Trigger a task on a pull request](https://docs.neo.projectdiscovery.io/api-reference/github/trigger-a-task-on-a-pull-request.md): Trigger a review, investigation, summary, fix, or other task on a specific pull request.
- [Get regression and risk overview for a repository](https://docs.neo.projectdiscovery.io/api-reference/github/get-regression-and-risk-overview-for-a-repository.md): Regression coverage, ranked risks, and the regression checklist for a repository. Returns status=unavailable when the upstream analysis service is not configured, and status=none when the repository has never been analyzed.
- [Get review metadata](https://docs.neo.projectdiscovery.io/api-reference/github/get-review-metadata.md): Get review metadata for a PR including task history.
- [List standing policy rules](https://docs.neo.projectdiscovery.io/api-reference/hooks/list-standing-policy-rules.md): Rules that apply to the caller: their own, plus any set for their workspace. Org rules are listed for every member — seeing the policy you are subject to is not the same as being able to change it.
- [Create a standing policy rule](https://docs.neo.projectdiscovery.io/api-reference/hooks/create-a-standing-policy-rule.md): Creates a rule in the caller's own scope, or in their workspace when they administer it. Repository and thread rules are read-only through this API.
- [Delete a standing policy rule](https://docs.neo.projectdiscovery.io/api-reference/hooks/delete-a-standing-policy-rule.md)
- [Update a standing policy rule](https://docs.neo.projectdiscovery.io/api-reference/hooks/update-a-standing-policy-rule.md): Enable or disable a rule, or replace its matcher or action. The event and scope are fixed at creation, because changing either makes it a different rule.
- [List owned and accessible team integration accounts](https://docs.neo.projectdiscovery.io/api-reference/integration/list-owned-and-accessible-team-integration-accounts.md)
- [Select an integration account for your next task](https://docs.neo.projectdiscovery.io/api-reference/integration/select-an-integration-account-for-your-next-task.md)
- [Share or unshare an owned integration account](https://docs.neo.projectdiscovery.io/api-reference/integration/share-or-unshare-an-owned-integration-account.md)
- [Share or unshare an owned configuration bound to a shared account](https://docs.neo.projectdiscovery.io/api-reference/integration/share-or-unshare-an-owned-configuration-bound-to-a-shared-account.md)
- [List issues](https://docs.neo.projectdiscovery.io/api-reference/issues/list-issues.md): List issues with optional filters and pagination.
- [Create issue](https://docs.neo.projectdiscovery.io/api-reference/issues/create-issue.md): Create a single issue.
- [Bulk create issues](https://docs.neo.projectdiscovery.io/api-reference/issues/bulk-create-issues.md): Create multiple issues in a single request.
- [Bulk delete issues](https://docs.neo.projectdiscovery.io/api-reference/issues/bulk-delete-issues.md): Delete multiple issues by IDs, filters, or both.
- [Bulk update issues](https://docs.neo.projectdiscovery.io/api-reference/issues/bulk-update-issues.md): Update multiple issues by IDs, filters, or both.
- [Get issue creation config](https://docs.neo.projectdiscovery.io/api-reference/issues/get-issue-creation-config.md): Get the issue creation policy/rules
- [Update issue creation config](https://docs.neo.projectdiscovery.io/api-reference/issues/update-issue-creation-config.md): Create or update the issue creation policy/rules
- [Export issues](https://docs.neo.projectdiscovery.io/api-reference/issues/export-issues.md): Export issues as CSV or JSON. Supports the same filters as list issues, including task_id. JSON responses use a versioned envelope with exported_at, evidence_schema_version defaults, and normalized reproduction_steps for downstream systems.
- [Get issue statistics](https://docs.neo.projectdiscovery.io/api-reference/issues/get-issue-statistics.md): Get aggregated issue statistics by severity, status, source, priority, and type. Accepts every filter of GET /api/v1/issues except pagination and sorting, so the counts match the rows the list returns.
- [Get issue detail](https://docs.neo.projectdiscovery.io/api-reference/issues/get-issue-detail.md): Get detailed information about a specific issue.
- [Delete issue](https://docs.neo.projectdiscovery.io/api-reference/issues/delete-issue.md): Delete an issue.
- [Update issue](https://docs.neo.projectdiscovery.io/api-reference/issues/update-issue.md): Update a single issue. Only provided fields are updated.
- [List issue assets](https://docs.neo.projectdiscovery.io/api-reference/issues/list-issue-assets.md): List all assets (affected targets) attached to an issue.
- [Create or update issue asset](https://docs.neo.projectdiscovery.io/api-reference/issues/create-or-update-issue-asset.md): Add or update an affected asset on an issue (deduped on issue_id + host + port + target).
- [Delete issue asset](https://docs.neo.projectdiscovery.io/api-reference/issues/delete-issue-asset.md): Remove a specific asset from an issue.
- [Update issue asset](https://docs.neo.projectdiscovery.io/api-reference/issues/update-issue-asset.md): Update status or metadata of a specific issue asset.
- [Add comment](https://docs.neo.projectdiscovery.io/api-reference/issues/add-comment.md): Add a comment to an issue.
- [Get issue timeline](https://docs.neo.projectdiscovery.io/api-reference/issues/get-issue-timeline.md): Get merged changelogs and comments for an issue, ordered by time.
- [List knowledge collections](https://docs.neo.projectdiscovery.io/api-reference/knowledge/list-knowledge-collections.md): Get available knowledge collections. By default returns all collections (user + global). Use is_global parameter to filter.
- [List knowledge chunks](https://docs.neo.projectdiscovery.io/api-reference/knowledge/list-knowledge-chunks.md): Retrieve code chunks from indexed knowledge bases with pagination
- [Index content into knowledge base](https://docs.neo.projectdiscovery.io/api-reference/knowledge/index-content-into-knowledge-base.md): Upload and index content (from text or URLs) into your personal knowledge base with hybrid search support
- [Search knowledge](https://docs.neo.projectdiscovery.io/api-reference/knowledge/search-knowledge.md): Perform semantic search across indexed code with automatic global fallback
- [Get global working memory](https://docs.neo.projectdiscovery.io/api-reference/memory/get-global-working-memory.md): Retrieve the current user's global (persistent) working memory containing user info and preferences.
- [Create global working memory](https://docs.neo.projectdiscovery.io/api-reference/memory/create-global-working-memory.md): Create the current user's global working memory (user info and preferences). Returns 409 if memory already exists. Accepts partial fields.
- [Update global working memory](https://docs.neo.projectdiscovery.io/api-reference/memory/update-global-working-memory.md): Update the current user's global working memory (user info and preferences). Merges with existing data, or creates it if it does not exist.
- [Get team memory](https://docs.neo.projectdiscovery.io/api-reference/memory/get-team-memory.md): Retrieve shared team memory — company context, architecture, asset owners, threat models, and related sections as Markdown. Any accepted team member can read it.
- [Create team memory](https://docs.neo.projectdiscovery.io/api-reference/memory/create-team-memory.md): Create shared team memory. Returns 409 if it already exists for this team. You may send any subset of sections. Any accepted team member may create it.
- [Update team memory](https://docs.neo.projectdiscovery.io/api-reference/memory/update-team-memory.md): Update shared team memory. Only sections included in the request are replaced; others stay unchanged. Creates team memory if it does not exist yet. Any accepted team member may update it.
- [Delete a custom team memory component](https://docs.neo.projectdiscovery.io/api-reference/memory/delete-a-custom-team-memory-component.md): Delete a single user-defined (custom) team-memory component by its snake_case key. Only custom components can be deleted — the built-in components (company, architecture, …) are permanent and attempting to delete one returns 400. Any accepted member of the team may delete a custom component.
- [List team memory history](https://docs.neo.projectdiscovery.io/api-reference/memory/list-team-memory-history.md): List past versions of team memory, newest first. When a component is specified, only versions that changed that section are returned, each with before and after Markdown.
- [Get task working memory](https://docs.neo.projectdiscovery.io/api-reference/memory/get-task-working-memory.md): Retrieve the working memory for a specific task (insights, facts, todos, tracked files).
- [Create task working memory](https://docs.neo.projectdiscovery.io/api-reference/memory/create-task-working-memory.md): Create the working memory for a specific task. Returns 409 if memory already exists for this task. Accepts partial fields.
- [Update task working memory](https://docs.neo.projectdiscovery.io/api-reference/memory/update-task-working-memory.md): Update the working memory for a specific task. Merges with existing data, or creates it if it does not exist.
- [Select the model source](https://docs.neo.projectdiscovery.io/api-reference/models/select-the-model-source.md): Select Neo credits, team/personal BYOK, or the caller's personal AI connections as the effective model source. Source-specific feature, authorization, credential, and readiness requirements are enforced atomically before the selection is stored.
- [List supported models](https://docs.neo.projectdiscovery.io/api-reference/models/list-supported-models.md): Returns all models supported for tasks. Use this endpoint to discover available models and their capabilities.
- [List tasks with captured traffic](https://docs.neo.projectdiscovery.io/api-reference/network-events/list-tasks-with-captured-traffic.md): List all tasks that have captured network events with summary statistics.
- [List network events](https://docs.neo.projectdiscovery.io/api-reference/network-events/list-network-events.md): List captured HTTP traffic with filtering, sorting, and pagination. Supports HTTPQL queries, time range filtering, and field selection. Pass show_stats=true to get statistics instead of events.
- [Get a single network event](https://docs.neo.projectdiscovery.io/api-reference/network-events/get-a-single-network-event.md): Retrieve full request/response details for a specific captured event.
- [Generate code from a captured request](https://docs.neo.projectdiscovery.io/api-reference/network-events/generate-code-from-a-captured-request.md): Render a captured request as runnable code (curl, Python, Go, etc.) or export as HAR.
- [Replay a captured request with optional edits](https://docs.neo.projectdiscovery.io/api-reference/network-events/replay-a-captured-request-with-optional-edits.md): Decrypts and replays a captured request with optional modifications (method, path, headers, body, JSON mutations). The destination host is pinned to the original capture — cannot be changed via edits.
- [Get out-of-band (OAST) interactions for a task](https://docs.neo.projectdiscovery.io/api-reference/network-events/get-out-of-band-oast-interactions-for-a-task.md): Return out-of-band interactions captured for a task: inbound HTTP callbacks and DNS lookups triggered by the target during testing. These confirm blind/out-of-band findings (such as SSRF, XXE, and blind injection) where the target reaches back to a controlled endpoint rather than responding inline.
- [Get network traffic sitemap](https://docs.neo.projectdiscovery.io/api-reference/network-events/get-network-traffic-sitemap.md): Get domain-level, path-level, or tree summary of captured traffic. Useful for understanding the attack surface.
- [List projects](https://docs.neo.projectdiscovery.io/api-reference/projects/list-projects.md): List all projects where the user is the owner, an explicit member, or a member of a team the project is shared with.
- [Create project](https://docs.neo.projectdiscovery.io/api-reference/projects/create-project.md): Create a new project. The creator is automatically added as an admin member.
- [Get project](https://docs.neo.projectdiscovery.io/api-reference/projects/get-project.md): Get project details by ID. User must be owner, explicit member, or member of a team the project is shared with.
- [Delete project](https://docs.neo.projectdiscovery.io/api-reference/projects/delete-project.md): Delete a project. Only the project owner can delete.
- [Update project](https://docs.neo.projectdiscovery.io/api-reference/projects/update-project.md): Update project name or team sharing. Only the project owner can update.
- [Clear a project's spending cap](https://docs.neo.projectdiscovery.io/api-reference/projects/clear-a-projects-spending-cap.md): Removes the project's spending cap so the project is bounded only by the relevant credit pool. Only the project owner can call this. Idempotent: clearing an already-uncapped project is a no-op.
- [Set a project's spending cap](https://docs.neo.projectdiscovery.io/api-reference/projects/set-a-projects-spending-cap.md): Set the project's spending cap. Only the project owner can call this today. Cap must not exceed the relevant credit pool (shared team's pool for team-shared projects, owner's user pool for solo projects). Use DELETE on this path to clear the cap.
- [List project members](https://docs.neo.projectdiscovery.io/api-reference/projects/list-project-members.md): List explicit members of a project. User must have project access through ownership, explicit membership, or team sharing.
- [Add project member](https://docs.neo.projectdiscovery.io/api-reference/projects/add-project-member.md): Add a team member to the project. Only the project owner can add members. The user must be a member of the project owner's team.
- [Remove project member](https://docs.neo.projectdiscovery.io/api-reference/projects/remove-project-member.md): Remove a member from the project. The project owner can remove any member. Members can remove themselves.
- [Get project Autopilot](https://docs.neo.projectdiscovery.io/api-reference/autopilot/get-project-autopilot.md)
- [Enable project Autopilot](https://docs.neo.projectdiscovery.io/api-reference/autopilot/enable-project-autopilot.md)
- [Disable and remove project Autopilot](https://docs.neo.projectdiscovery.io/api-reference/autopilot/disable-and-remove-project-autopilot.md)
- [Update project Autopilot](https://docs.neo.projectdiscovery.io/api-reference/autopilot/update-project-autopilot.md)
- [List project Autopilot executions](https://docs.neo.projectdiscovery.io/api-reference/autopilot/list-project-autopilot-executions.md)
- [Pause project Autopilot](https://docs.neo.projectdiscovery.io/api-reference/autopilot/pause-project-autopilot.md)
- [Resume project Autopilot](https://docs.neo.projectdiscovery.io/api-reference/autopilot/resume-project-autopilot.md)
- [Run project Autopilot now](https://docs.neo.projectdiscovery.io/api-reference/autopilot/run-project-autopilot-now.md)
- [Get task Autopilot](https://docs.neo.projectdiscovery.io/api-reference/autopilot/get-task-autopilot.md)
- [Enable task Autopilot](https://docs.neo.projectdiscovery.io/api-reference/autopilot/enable-task-autopilot.md)
- [Disable and remove task Autopilot](https://docs.neo.projectdiscovery.io/api-reference/autopilot/disable-and-remove-task-autopilot.md)
- [Update task Autopilot](https://docs.neo.projectdiscovery.io/api-reference/autopilot/update-task-autopilot.md)
- [List task Autopilot executions](https://docs.neo.projectdiscovery.io/api-reference/autopilot/list-task-autopilot-executions.md)
- [Pause task Autopilot](https://docs.neo.projectdiscovery.io/api-reference/autopilot/pause-task-autopilot.md)
- [Resume task Autopilot](https://docs.neo.projectdiscovery.io/api-reference/autopilot/resume-task-autopilot.md)
- [Run task Autopilot now](https://docs.neo.projectdiscovery.io/api-reference/autopilot/run-task-autopilot-now.md)
- [List project secret bindings](https://docs.neo.projectdiscovery.io/api-reference/secrets/list-project-secret-bindings.md): List all personal secrets explicitly shared with a project. Values are masked.
- [Bind a personal secret to a project](https://docs.neo.projectdiscovery.io/api-reference/secrets/bind-a-personal-secret-to-a-project.md): A project member may bind only a personal secret they own.
- [Remove a project secret binding](https://docs.neo.projectdiscovery.io/api-reference/secrets/remove-a-project-secret-binding.md): Project owners may remove any binding; secret owners may remove their own.
- [List secrets](https://docs.neo.projectdiscovery.io/api-reference/secrets/list-secrets.md): Retrieve personal secrets and eligible explicitly team-shared secrets. Shared values are fully masked and require explicit stable-ID selection.
- [Create secret](https://docs.neo.projectdiscovery.io/api-reference/secrets/create-secret.md): Store a new encrypted secret for the authenticated user.
- [Delete secret](https://docs.neo.projectdiscovery.io/api-reference/secrets/delete-secret.md): Permanently delete a secret by ID.
- [Update secret value or metadata](https://docs.neo.projectdiscovery.io/api-reference/secrets/update-secret-value-or-metadata.md): Update the value, default availability or private/team visibility of a secret owned by the caller. Team membership never transfers ownership. Supply at least one field. Existing identity and attachments are preserved; subsequent task executions resolve the updated value. Plaintext is never returned.
- [List prompts](https://docs.neo.projectdiscovery.io/api-reference/prompts/list-prompts.md): List prompts. visibility=public returns public prompts, visibility=private returns user's own, visibility=team returns team prompts, visibility=all (default) returns all visible. Supports search and category filters.
- [Create a prompt](https://docs.neo.projectdiscovery.io/api-reference/prompts/create-a-prompt.md): Create a new prompt in the user's personal library. Created as private by default.
- [List prompt categories](https://docs.neo.projectdiscovery.io/api-reference/prompts/list-prompt-categories.md): List distinct categories with prompt counts. visibility=all (default) returns all visible categories, visibility=public returns public library categories, visibility=private returns user's own categories, visibility=team returns team categories.
- [Get library prompt details](https://docs.neo.projectdiscovery.io/api-reference/prompts/get-library-prompt-details.md): Get full details of a specific prompt from the library by its UUID.
- [Copy a library prompt](https://docs.neo.projectdiscovery.io/api-reference/prompts/copy-a-library-prompt.md): Copy a library prompt into the user's personal collection. Creates an independent copy.
- [Get prompt details](https://docs.neo.projectdiscovery.io/api-reference/prompts/get-prompt-details.md): Get details of a specific prompt owned by the user.
- [Delete prompt](https://docs.neo.projectdiscovery.io/api-reference/prompts/delete-prompt.md): Delete a prompt owned by the user.
- [Update prompt](https://docs.neo.projectdiscovery.io/api-reference/prompts/update-prompt.md): Update a prompt owned by the user.
- [Get the caller's referral program page data](https://docs.neo.projectdiscovery.io/api-reference/referrals/get-the-callers-referral-program-page-data.md): Returns everything the referrals page needs in one call: the resolved program (payg|enterprise), the shareable sign-up link (code embedded), server-computed credit + USD amounts, the lifetime cap, stats, and the caller's referral rows. Lazily creates the caller's referral code.
- [Attribute the caller to a referral code](https://docs.neo.projectdiscovery.io/api-reference/referrals/attribute-the-caller-to-a-referral-code.md): Records referral attribution for the authenticated caller from a sign-up link code. Response is intentionally generic — it never reveals whether a code exists or why a claim was rejected. Failures are silent by design and never block onboarding.
- [Send referral invite emails](https://docs.neo.projectdiscovery.io/api-reference/referrals/send-referral-invite-emails.md): Creates an invite per email and sends each the referrer's sign-up link. Max 10 emails per request; a per-day cap also applies. The per-email result is intentionally enumeration-safe — "skipped" covers duplicate, self, and over-cap without revealing whether an address has an account.
- [Submit enterprise sales-referral leads](https://docs.neo.projectdiscovery.io/api-reference/referrals/submit-enterprise-sales-referral-leads.md): Enterprise program only. Creates a pending lead per row for sales to review. Max 10 per request; a per-day cap applies. No email is sent to the contact (sales does outreach). Per-row result is enumeration-safe.
- [Connect a saved VPN profile in the current workspace](https://docs.neo.projectdiscovery.io/api-reference/sandbox/connect-a-saved-vpn-profile-in-the-current-workspace.md)
- [Disconnect the VPN in the current workspace](https://docs.neo.projectdiscovery.io/api-reference/sandbox/disconnect-the-vpn-in-the-current-workspace.md)
- [List saved VPN profiles](https://docs.neo.projectdiscovery.io/api-reference/sandbox/list-saved-vpn-profiles.md)
- [Save a VPN profile](https://docs.neo.projectdiscovery.io/api-reference/sandbox/save-a-vpn-profile.md)
- [Delete an owned VPN profile after disconnecting its sessions](https://docs.neo.projectdiscovery.io/api-reference/sandbox/delete-an-owned-vpn-profile-after-disconnecting-its-sessions.md)
- [Edit a VPN profile as its owner](https://docs.neo.projectdiscovery.io/api-reference/sandbox/edit-a-vpn-profile-as-its-owner.md)
- [Current workspace VPN status](https://docs.neo.projectdiscovery.io/api-reference/sandbox/current-workspace-vpn-status.md)
- [List sandboxes](https://docs.neo.projectdiscovery.io/api-reference/sandboxes/list-sandboxes.md): Returns your Neo-managed cloud sandbox and any self-hosted sandboxes you have installed. Self-hosted entries include available actions such as connect and disconnect. Cloud entries may include resource usage while running. Free plan accounts have no persistent cloud sandbox: the list is empty and ev…
- [Start cloud sandbox](https://docs.neo.projectdiscovery.io/api-reference/sandboxes/start-cloud-sandbox.md): Starts your Neo-managed cloud sandbox when it has not been provisioned yet or needs to be restarted after a failure. Use this when the cloud entry in the list has no id yet.
- [Remove self-hosted sandbox](https://docs.neo.projectdiscovery.io/api-reference/sandboxes/remove-self-hosted-sandbox.md): Unlinks a self-hosted sandbox from your account. Re-install and register the host again to add it back.
- [Update sandbox preferences](https://docs.neo.projectdiscovery.io/api-reference/sandboxes/update-sandbox-preferences.md): Update `purpose` or `display_name` for a self-hosted install.
- [Run sandbox action](https://docs.neo.projectdiscovery.io/api-reference/sandboxes/run-sandbox-action.md): For Neo-managed cloud sandboxes: pause, resume, or start using the id from the list response.
- [List schedules](https://docs.neo.projectdiscovery.io/api-reference/schedules/list-schedules.md): Get schedules for the authenticated user or project.
- [Create schedule](https://docs.neo.projectdiscovery.io/api-reference/schedules/create-schedule.md): Create a new scheduled or one-time task.
- [Get schedule](https://docs.neo.projectdiscovery.io/api-reference/schedules/get-schedule.md): Get details of a specific schedule by ID, including execution history.
- [Delete schedule](https://docs.neo.projectdiscovery.io/api-reference/schedules/delete-schedule.md): Permanently delete a schedule. This cannot be undone. Pending runs will be canceled.
- [Update schedule](https://docs.neo.projectdiscovery.io/api-reference/schedules/update-schedule.md): Update an existing schedule. Partial updates supported - only include fields to change. Changing schedule_type (recurring to one_time, or one_time to recurring) is supported. When changing to one_time, run_at is required. When changing to recurring, scan_frequency is required unless the schedule alr…
- [Get execution history](https://docs.neo.projectdiscovery.io/api-reference/schedules/get-execution-history.md): Get the execution history for a schedule. Includes status, timing, and any errors.
- [Pause schedule](https://docs.neo.projectdiscovery.io/api-reference/schedules/pause-schedule.md): Pause an active schedule. The schedule will not execute until resumed.
- [Resume schedule](https://docs.neo.projectdiscovery.io/api-reference/schedules/resume-schedule.md): Resume a paused schedule. Next execution will be calculated.
- [Run schedule now](https://docs.neo.projectdiscovery.io/api-reference/schedules/run-schedule-now.md): Start an immediate run for an active schedule without changing its cadence.
- [List all skills](https://docs.neo.projectdiscovery.io/api-reference/skills/list-all-skills.md): List all global skills with optional search and category filters.
- [List Slack channels the bot is in](https://docs.neo.projectdiscovery.io/api-reference/slack/list-slack-channels-the-bot-is-in.md): List the Slack channels the Neo bot is a member of, for the current Neo team's workspace, so the UI can offer a per-channel config picker.
- [Get Slack channel config](https://docs.neo.projectdiscovery.io/api-reference/slack/get-slack-channel-config.md): Get the current Neo team's per-channel Slack config. Returns defaults when the channel has no stored config.
- [Update Slack channel config](https://docs.neo.projectdiscovery.io/api-reference/slack/update-slack-channel-config.md): Update the current Neo team's per-channel Slack config. Any team member may change these. Only provided fields are updated.
- [Slack OAuth callback](https://docs.neo.projectdiscovery.io/api-reference/slack/slack-oauth-callback.md): Handle the Slack OAuth callback. Exchanges the authorization code for a bot token and creates or updates the workspace installation. Supports Neo-initiated installs via OAuth state and Slack Marketplace installs via setup-token claim redirects.
- [Claim pending Slack installation](https://docs.neo.projectdiscovery.io/api-reference/slack/claim-pending-slack-installation.md): Claim a pending Slack Marketplace installation for the current Neo team.
- [Initiate Slack OAuth](https://docs.neo.projectdiscovery.io/api-reference/slack/initiate-slack-oauth.md): Get a redirect URL to start the Slack OAuth V2 flow for installing the bot into a workspace for the current Neo team.
- [Get Slack installation status](https://docs.neo.projectdiscovery.io/api-reference/slack/get-slack-installation-status.md): Check the Slack installation status for the current Neo team.
- [Disconnect Slack installation](https://docs.neo.projectdiscovery.io/api-reference/slack/disconnect-slack-installation.md): Disconnect a Slack workspace installation from the current Neo team. Only team admins can remove it.
- [Get Slack workspace settings](https://docs.neo.projectdiscovery.io/api-reference/slack/get-slack-workspace-settings.md): Get the current Neo team's Slack workspace settings (e.g. unprompted replies).
- [Update Slack workspace settings](https://docs.neo.projectdiscovery.io/api-reference/slack/update-slack-workspace-settings.md): Update the current Neo team's Slack workspace settings. Any team member may change these.
- [List SSH keys](https://docs.neo.projectdiscovery.io/api-reference/ssh-keys/list-ssh-keys.md): List personal and eligible team-shared SSH connections, or project connections when a project is selected. Private keys are never returned. Only public key, fingerprint, and metadata.
- [Generate SSH key pair](https://docs.neo.projectdiscovery.io/api-reference/ssh-keys/generate-ssh-key-pair.md): Generate a new SSH key pair with the specified algorithm. The private key is encrypted and stored server-side. It is never returned to the caller. Only the public key and fingerprint are returned.
- [Get SSH key](https://docs.neo.projectdiscovery.io/api-reference/ssh-keys/get-ssh-key.md): Get a single SSH key by ID. Returns public key and metadata only.
- [Delete SSH key](https://docs.neo.projectdiscovery.io/api-reference/ssh-keys/delete-ssh-key.md): Permanently delete an SSH key pair by ID.
- [Update SSH key](https://docs.neo.projectdiscovery.io/api-reference/ssh-keys/update-ssh-key.md): Update SSH connection metadata. Password can only be updated for password-based SSH connections. Private keys are never returned.
- [Test SSH connection](https://docs.neo.projectdiscovery.io/api-reference/ssh-keys/test-ssh-connection.md): Test whether a saved SSH connection can authenticate using its stored encrypted credential.
- [Get persisted follow-up suggestions](https://docs.neo.projectdiscovery.io/api-reference/tasks/get-persisted-follow-up-suggestions.md): Returns the latest persisted suggestions for one task, one project, or the authenticated user. This endpoint never invokes a model.
- [Generate and persist follow-up suggestions](https://docs.neo.projectdiscovery.io/api-reference/tasks/generate-and-persist-follow-up-suggestions.md): Explicitly invokes the configured model and replaces the latest persisted suggestions for one task, one project, or the authenticated user. Concurrent identical requests are coalesced.
- [List tasks](https://docs.neo.projectdiscovery.io/api-reference/tasks/list-tasks.md): List the current user's own tasks with cursor-based pagination and optional status/scheduled filters. Team-visible tasks owned by teammates are excluded from this list by default, but may still be accessed directly by ID when authorized.
- [Create task (stream/json)](https://docs.neo.projectdiscovery.io/api-reference/tasks/create-task-streamjson.md): Create a new task or continue an existing one. Returns SSE by default, or JSON acknowledgement when requested.
- [Delete task](https://docs.neo.projectdiscovery.io/api-reference/tasks/delete-task.md): Permanently delete a task and all its messages
- [Get task details](https://docs.neo.projectdiscovery.io/api-reference/tasks/get-task-details.md): Retrieve task metadata and all messages for a specific task
- [Delete task by ID](https://docs.neo.projectdiscovery.io/api-reference/tasks/delete-task-by-id.md): Permanently delete a task and all its messages using path parameter
- [Update task metadata](https://docs.neo.projectdiscovery.io/api-reference/tasks/update-task-metadata.md): Update task properties like title. Only the task owner can update.
- [Abort active task](https://docs.neo.projectdiscovery.io/api-reference/tasks/abort-active-task.md): Cancel an actively running stream for a specific task
- [Abort a single subagent run or tool call](https://docs.neo.projectdiscovery.io/api-reference/tasks/abort-a-single-subagent-run-or-tool-call.md): Cancel one in-flight unit of work inside an active task — either a subagent run or a tool call — without stopping the parent task or its siblings. Provide exactly one of `subagent_run_id` or `tool_call_id`:
- [Get agent audit log](https://docs.neo.projectdiscovery.io/api-reference/tasks/get-agent-audit-log.md): Derive the agent + tool audit log for a task on demand from the stream's R2 snapshot (the live snapshot for an active stream, or the final stored message for a finished one). No separate audit store is kept.
- [Approve or decline a suspended tool call](https://docs.neo.projectdiscovery.io/api-reference/tasks/approve-or-decline-a-suspended-tool-call.md): Submits an approval decision for a task whose agent stream is suspended waiting for user input (for example, `plan_review` or `ask_question`).
- [Get task completion artifact](https://docs.neo.projectdiscovery.io/api-reference/tasks/get-task-completion-artifact.md): Returns the completion artifact for a finished task when completion_delivery=artifact was set, including a summary and issues.
- [Fork a task from a message](https://docs.neo.projectdiscovery.io/api-reference/tasks/fork-a-task-from-a-message.md): Creates an independent task containing the completed conversation turns through the selected message. Forking from a user message copies only prior completed turns and returns that message as `prefill`.
- [Get stream health status](https://docs.neo.projectdiscovery.io/api-reference/tasks/get-stream-health-status.md): Check the health status of an active stream including age and last activity
- [Steer a live task with mid-run user input](https://docs.neo.projectdiscovery.io/api-reference/tasks/steer-a-live-task-with-mid-run-user-input.md): Inject a user message into an actively running (or resuming) task. The current tool/LLM step finishes, then every live agent loop on this stream sees a real user message at its next LLM step.
- [Get the cached Insights canvas for a task](https://docs.neo.projectdiscovery.io/api-reference/tasks/get-the-cached-insights-canvas-for-a-task.md): Returns the cached CanvasDocV1 insights document for a task, if one has been generated.
- [Generate the Insights canvas for a task](https://docs.neo.projectdiscovery.io/api-reference/tasks/generate-the-insights-canvas-for-a-task.md): Summarizes the task transcript into a CanvasDocV1 insights document and caches it. Use to backfill the Insights tab for tasks where the agent never produced a canvas, or to regenerate it.
- [Resume a failed task](https://docs.neo.projectdiscovery.io/api-reference/tasks/resume-a-failed-task.md): Rebuild a crashed or failed turn from its chunk log and continue it on the same stream, rather than starting the task over.
- [Get shared task (unauthenticated)](https://docs.neo.projectdiscovery.io/api-reference/tasks/get-shared-task-unauthenticated.md): Access a shared task without authentication. Similar to ChatGPT's share links. Works for tasks with visibility set to 'unlisted'. Returns a read-only view.
- [Resume task stream](https://docs.neo.projectdiscovery.io/api-reference/tasks/resume-task-stream.md): Resume streaming for a specific task using path parameter
- [Update task visibility](https://docs.neo.projectdiscovery.io/api-reference/tasks/update-task-visibility.md): Change a task's visibility setting. Only the task owner can update visibility. - **private** (default): Only owner can access - **team**: Accessible by active members of the owner's team - **unlisted**: Accessible by anyone with the share link - **support**: Accessible by ProjectDiscovery support
- [Submit a support ticket](https://docs.neo.projectdiscovery.io/api-reference/support/submit-a-support-ticket.md): Create a support ticket from the in-app Contact Support form. The backend enriches the request with the authenticated user's identity, plan tier, and org (resolved server-side, never trusted from the client) and opens a thread in Plain. Accepts multipart/form-data so binary attachments can be upload…
- [Get team](https://docs.neo.projectdiscovery.io/api-reference/teams/get-team.md): Get the team owned by the current user, or null if no team exists.
- [Create team](https://docs.neo.projectdiscovery.io/api-reference/teams/create-team.md): Create a new team for the current user. Each user can only own one team.
- [Delete team](https://docs.neo.projectdiscovery.io/api-reference/teams/delete-team.md): Delete the current user's team. This will remove all members and activity logs.
- [Update team](https://docs.neo.projectdiscovery.io/api-reference/teams/update-team.md): Update team settings. Team admins only.
- [Get task data retention](https://docs.neo.projectdiscovery.io/api-reference/teams/get-task-data-retention.md): Get the team's effective completed-task retention policy.
- [Update task data retention](https://docs.neo.projectdiscovery.io/api-reference/teams/update-task-data-retention.md): Set the team-wide retention period for completed task data. The policy applies to existing and future tasks and can be changed by team admins on poc and enterprise plans.
- [Preview task data retention impact](https://docs.neo.projectdiscovery.io/api-reference/teams/preview-task-data-retention-impact.md): Count existing completed tasks that are already older than a proposed retention period. This endpoint does not change the policy or delete data.
- [Set or clear the team-wide default spending cap](https://docs.neo.projectdiscovery.io/api-reference/teams/set-or-clear-the-team-wide-default-spending-cap.md): Team admin only. The default applies to every member without an explicit override (including the owner). null clears the default. Must not exceed the team's issued credits (returns 400). Applies retroactively to new tasks; never interrupts in-flight tasks.
- [List pending invitations](https://docs.neo.projectdiscovery.io/api-reference/teams/list-pending-invitations.md): List all pending team invitations for the current user.
- [Accept invitation](https://docs.neo.projectdiscovery.io/api-reference/teams/accept-invitation.md): Accept a pending team invitation.
- [List team members](https://docs.neo.projectdiscovery.io/api-reference/teams/list-team-members.md): List all members of the current user's team.
- [Clear a team member's spending cap](https://docs.neo.projectdiscovery.io/api-reference/teams/clear-a-team-members-spending-cap.md): Team admin only. Removes the per-member override so the member falls back to the team-wide default (if any) or to being bounded only by the team pool. Idempotent: clearing an already-uncapped member is a no-op.
- [Set a team member's spending cap](https://docs.neo.projectdiscovery.io/api-reference/teams/set-a-team-members-spending-cap.md): Team admin only. The owner is cappable like any other member. Cap must not exceed the team's issued credits (returns 400). Cap window aligns with the team pool's usage_count_from. Use DELETE on this path to clear a cap.
- [Invite member](https://docs.neo.projectdiscovery.io/api-reference/teams/invite-member.md): Invite a new member to the team by email. The member can be an existing or new user.
- [Remove member](https://docs.neo.projectdiscovery.io/api-reference/teams/remove-member.md): Remove a member from the team. Team admins or the member themselves can remove.
- [Update member role](https://docs.neo.projectdiscovery.io/api-reference/teams/update-member-role.md): Update a team member's role. Only team admins can update roles.
- [Start triage runs for several findings](https://docs.neo.projectdiscovery.io/api-reference/triage/start-triage-runs-for-several-findings.md): Start a Neo triage run for each of up to 20 findings of your team in one request. Model access, credits and your role are checked once, before any run is claimed; then each finding is claimed and dispatched like POST /api/v1/triage/findings/{id}/runs. The response has one result per requested id, in…
- [Find a triage run by its task id](https://docs.neo.projectdiscovery.io/api-reference/triage/find-a-triage-run-by-its-task-id.md): Return the finding id and the run that a Neo task belongs to. Only runs of your team whose finding you can see are found; any other task id returns 404.
- [List the Triage queue](https://docs.neo.projectdiscovery.io/api-reference/triage/list-the-triage-queue.md): List the findings of every active source of your team (HackerOne, GitHub, Security Inbox and custom API sources) that you can see, with filters, views, sorts and cursor pagination. Each finding carries its server-computed stage and effective severity. A cursor is bound to the sort and filters it was…
- [Get a Triage finding](https://docs.neo.projectdiscovery.io/api-reference/triage/get-a-triage-finding.md): Return one finding of your team with its latest triage run and the bounded provider record (`raw`). A finding of another team, or of a removed source, returns 404.
- [Archive or restore a Triage finding](https://docs.neo.projectdiscovery.io/api-reference/triage/archive-or-restore-a-triage-finding.md): Archive (`archived: true`) or restore (`archived: false`) one finding of your team. Team admins only.
- [List the review history of a Triage finding](https://docs.neo.projectdiscovery.io/api-reference/triage/list-the-review-history-of-a-triage-finding.md): List the review events of one finding of your team in history order, oldest first. Events are append-only: an undo is a new event that points at the one it reverses. `before` and `after` are review snapshots only, never report content or task output. `writeback` records what a source write-back woul…
- [Retest the fix of an accepted Triage finding](https://docs.neo.projectdiscovery.io/api-reference/triage/retest-the-fix-of-an-accepted-triage-finding.md): Start a retest of the fix of one accepted finding of your team. A retest is a run of kind `retest` on the same finding: Neo checks whether the fix holds against the fix links of the review (pull request, repository and staging target, all treated as untrusted data) and reports `retest_outcome` fixed…
- [Review a Triage finding](https://docs.neo.projectdiscovery.io/api-reference/triage/review-a-triage-finding.md): Record your team's decision on one finding, its severity override or its fix record. Decisions: `accept`, `mark_duplicate` (with `duplicate_of`), `decline` (with `reason`), `snooze` (with `until`, in the future and at most one year ahead; only without a decision or after a snooze ended) and `return_…
- [Undo the latest review change of a Triage finding](https://docs.neo.projectdiscovery.io/api-reference/triage/undo-the-latest-review-change-of-a-triage-finding.md): Reverse the newest event of the finding that is not undone yet: the review returns to the state before that event, and a new `undo` event points at the one it reverses. Earlier events are never changed. Undo applies only at the current `expected_version` and not while a retest of the fix is running.…
- [List the triage runs of a finding](https://docs.neo.projectdiscovery.io/api-reference/triage/list-the-triage-runs-of-a-finding.md): List the newest triage runs of one finding of your team (at most 100), newest first. Runs are append-only: a new run never changes an earlier one.
- [Start a triage run for a finding](https://docs.neo.projectdiscovery.io/api-reference/triage/start-a-triage-run-for-a-finding.md): Start a Neo triage run for one finding of your team. This is the one route that starts triage for every source: HackerOne reports, GitHub security advisories, Security Inbox (Gmail) threads and custom API source findings, each addressed by its opaque finding id. Neo builds the triage prompt (custom…
- [Get the Triage settings of your team](https://docs.neo.projectdiscovery.io/api-reference/triage/get-the-triage-settings-of-your-team.md): Return the SLA targets of your team in days per severity. A team that stored none gets the defaults (critical 7, high 14, medium 30, low 90). Every team member can read them.
- [Set the Triage settings of your team](https://docs.neo.projectdiscovery.io/api-reference/triage/set-the-triage-settings-of-your-team.md): Set the SLA targets of your team, each 1 to 3650 days. Team admins only. Other team settings are kept.
- [Get a source job](https://docs.neo.projectdiscovery.io/api-reference/triage/get-a-source-job.md): Return one source job of your team. A job of another team returns 404.
- [Cancel a queued source job](https://docs.neo.projectdiscovery.io/api-reference/triage/cancel-a-queued-source-job.md): Cancel a source job of your team that no worker has started yet. Team admins only. A job of another team returns 404; a job that is already running or finished returns 409.
- [List Triage sources](https://docs.neo.projectdiscovery.io/api-reference/triage/list-triage-sources.md): List the active Triage sources of your team, oldest first. Removed sources are not listed. Credentials are never returned; a source shows only whether one is configured.
- [Create a custom API source](https://docs.neo.projectdiscovery.io/api-reference/triage/create-a-custom-api-source.md): Create a custom API source for your team in the draft state. Team admins only. The request takes a name, a setup mode, a schedule, a documentation reference and an optional request template, pagination and mapping. None of these may contain a credential: send credentials only to the test action. Nam…
- [Get a Triage source](https://docs.neo.projectdiscovery.io/api-reference/triage/get-a-triage-source.md): Return one active source of your team. A source of another team, or a removed source, returns 404.
- [Remove a custom API source](https://docs.neo.projectdiscovery.io/api-reference/triage/remove-a-custom-api-source.md): Remove a custom source. Team admins only. Removal stops its schedule, revokes its stored credential and hides it. Its findings and job history are kept under the team data retention policy. Removal works while custom sources are turned off, so a credential can always be revoked.
- [Update a custom API source](https://docs.neo.projectdiscovery.io/api-reference/triage/update-a-custom-api-source.md): Update only the supplied fields of a custom source. Team admins only. A change of documentation, request template (authentication included), pagination or mapping increments configuration_version, marks the previous test stale, and pauses synchronization until the new configuration passes a test. A…
- [Activate a custom API source](https://docs.neo.projectdiscovery.io/api-reference/triage/activate-a-custom-api-source.md): Enable a source whose current configuration passed a test and start its first synchronization in one step. Team admins only. The source shows setting_up until that synchronization succeeds, then ready. While another synchronization of the source is queued or running the request is refused with 409 s…
- [Analyze source documentation](https://docs.neo.projectdiscovery.io/api-reference/triage/analyze-source-documentation.md): Start a background job that reads the source's OpenAPI 3 or Swagger 2 documentation and proposes a request template, pagination and mapping. Team admins only. The source must use documentation setup. One analysis per source runs at a time, and a team runs at most 10 analyses and tests at once.
- [Run auto triage of a source now](https://docs.neo.projectdiscovery.io/api-reference/triage/run-auto-triage-of-a-source-now.md): Queue one auto triage run of a source whose rule is enabled. Team admins only. The run claims untriaged findings in priority order (at most 20) and starts their triage as the rule's actor. The same Idempotency-Key returns the same job. A source runs one auto triage job at a time (409 job_in_progress…
- [List the findings of one source](https://docs.neo.projectdiscovery.io/api-reference/triage/list-the-findings-of-one-source.md): List the findings of one active source of your team, most recently seen first, with cursor pagination. A source of another team returns 404.
- [List source jobs](https://docs.neo.projectdiscovery.io/api-reference/triage/list-source-jobs.md): List the most recent analysis, test and synchronization jobs of one source of your team, newest first.
- [Get the settings of a Triage source](https://docs.neo.projectdiscovery.io/api-reference/triage/get-the-settings-of-a-triage-source.md): Return the settings of one source of your team: its display name, context labels, update policy, closed status values and auto triage rule. Every source kind (HackerOne, GitHub, Security Inbox and custom API sources) has settings; a source without stored settings returns the defaults. Settings reads…
- [Change the settings of a Triage source](https://docs.neo.projectdiscovery.io/api-reference/triage/change-the-settings-of-a-triage-source.md): Change the supplied settings of one source of your team. Team admins only. Inbox listings and synchronization never write these settings, so a display name survives them. The update policy is stored and never executed. Saving an enabled auto triage rule makes you its actor: the rule runs as you, so…
- [Synchronize a custom API source now](https://docs.neo.projectdiscovery.io/api-reference/triage/synchronize-a-custom-api-source-now.md): Start a manual synchronization of an active source. Team admins and members can start one; viewers cannot. A source runs one synchronization at a time: while one is queued or running, the request is refused with 409 sync_in_progress. Within 5 minutes of the source's last synchronization (or of the e…
- [Test a custom API source](https://docs.neo.projectdiscovery.io/api-reference/triage/test-a-custom-api-source.md): Store an optional new credential and start a background job that tests authentication and one bounded sample request with the current configuration. Team admins only. The credential is write-only: Neo encrypts it immediately and never returns or logs it. The response carries only credential_configur…
- [List all stream usages](https://docs.neo.projectdiscovery.io/api-reference/usage/list-all-stream-usages.md): List usage data for individual streams. Each stream represents a single execution within a task. Use this endpoint for detailed per-stream analysis including cost, tool calls, and execution metrics. For aggregated task-level data, use GET /api/v1/usage/tasks instead.
- [Get overall usage summary](https://docs.neo.projectdiscovery.io/api-reference/usage/get-overall-usage-summary.md): Get an overall usage summary with totals across all tasks. Includes total costs, task counts by status, usage breakdown by model, and time-based trends.
- [List all task usages](https://docs.neo.projectdiscovery.io/api-reference/usage/list-all-task-usages.md): List usage data for all tasks with aggregated metrics. Each task may contain multiple streams (executions), and this endpoint returns the combined totals for each task including cost, tool calls, and execution times.
- [Get task usage by ID](https://docs.neo.projectdiscovery.io/api-reference/usage/get-task-usage-by-id.md): Get detailed usage data for a specific task by its ID. Returns aggregated metrics across all streams within this task, including token counts, costs, tool calls, and execution times.
- [Get current user](https://docs.neo.projectdiscovery.io/api-reference/user/get-current-user.md): Get the current authenticated user's profile information including: - Email and role - Feature flags (neo_ai access, etc.) - User tag (if any) - Team membership (if user belongs to a team)
- [Update current user settings](https://docs.neo.projectdiscovery.io/api-reference/user/update-current-user-settings.md): Update settings owned by the current authenticated user.
- [List the current user's notification preferences](https://docs.neo.projectdiscovery.io/api-reference/user/list-the-current-users-notification-preferences.md): Returns the authenticated user's notification preferences for every known source. Sources without an explicit row default to enabled=true.
- [Update one notification preference for the current user](https://docs.neo.projectdiscovery.io/api-reference/user/update-one-notification-preference-for-the-current-user.md): Upsert a single (source, enabled) pair for the authenticated user. The user_id is taken from the session and never from the request body.
- [Get API key](https://docs.neo.projectdiscovery.io/api-reference/api-keys/get-api-key.md): Retrieve the API key for the authenticated user.
- [Create API key](https://docs.neo.projectdiscovery.io/api-reference/api-keys/create-api-key.md): Create a new Neo API key for the authenticated user.
- [Rotate API key](https://docs.neo.projectdiscovery.io/api-reference/api-keys/rotate-api-key.md): Rotate the API key for the authenticated user.
- [MCP Server](https://docs.neo.projectdiscovery.io/integrations/mcp.md): Connect Neo to Cursor, Claude, and any MCP-compatible client over the Model Context Protocol so you can run security tasks, monitor results, and pull files from wherever you already work.
- [Webhooks & Artifacts](https://docs.neo.projectdiscovery.io/integrations/webhooks.md): Export task results automatically over webhooks or pull them via the API so findings flow into your own pipelines, ticketing, and storage.
- [HackerOne](https://docs.neo.projectdiscovery.io/integrations/hackerone.md): Connect HackerOne to Neo for report triage and Triage Summary automation
- [Connecting Your Stack](https://docs.neo.projectdiscovery.io/essentials/connecting-your-stack.md): Connect your repositories, environments, and services so Neo can test your applications with full context.
- [Overview](https://docs.neo.projectdiscovery.io/integrations/slack.md): Use Neo directly in Slack to run security tasks, review findings, and continue investigations with your team.
- [Install & Connect](https://docs.neo.projectdiscovery.io/integrations/slack-install-and-connect.md): Install the Neo Slack app, connect your workspace to Neo, and complete setup without ownership or permission confusion.
- [Usage](https://docs.neo.projectdiscovery.io/integrations/slack-use-neo-in-slack.md): Work with Neo in DMs and channels, follow task progress, use commands and channel memory, manage canvases and Lists, and stop or mute tasks with reactions.
- [Admin & Permissions](https://docs.neo.projectdiscovery.io/integrations/slack-admin-and-permissions.md): Review the permissions Neo needs in Slack, how admins manage the workspace connection, and how channel-level behavior works.
- [Troubleshooting](https://docs.neo.projectdiscovery.io/integrations/slack-troubleshooting.md): Diagnose Slack install states, reconnect problems, channel issues, and other common Neo-in-Slack edge cases.
- [Privacy & Support](https://docs.neo.projectdiscovery.io/integrations/slack-privacy-and-support.md): Understand how Neo handles Slack data and where to go for support, privacy, legal, and trust information.
- [Linear](https://docs.neo.projectdiscovery.io/integrations/linear.md): Native Linear agent for vulnerability backlog, triage, retesting, and issue management
- [Overview](https://docs.neo.projectdiscovery.io/integrations/github.md): Bring Neo into your pull request workflow as a GitHub App that combines scanner pipelines, AI-powered code review, and live runtime validation.
- [Install & Connect](https://docs.neo.projectdiscovery.io/integrations/github-install-and-connect.md): Install the Neo GitHub App on an org or account, link your Neo team, and understand reconnect, switch-org, and disconnect behavior.
- [Usage](https://docs.neo.projectdiscovery.io/integrations/github-use-neo-on-github.md): How automatic reviews fire, what Neo posts on a PR, the full command list, incremental review with auto-resolve, and live validation.
- [Admin & Permissions](https://docs.neo.projectdiscovery.io/integrations/github-admin-and-permissions.md): GitHub App permissions Neo requests, who can install vs use, the full per-repo and org configuration surface, gating, and the GitHub-side collaborator gate.
- [Troubleshooting](https://docs.neo.projectdiscovery.io/integrations/github-troubleshooting.md): Diagnose missing installs, "already installed" confusion, auto-review not firing, collaborator-gate 403s, and webhook delivery issues.
- [Privacy & Support](https://docs.neo.projectdiscovery.io/integrations/github-privacy-and-support.md): How Neo handles GitHub data and where to go for support, privacy, legal, and trust information.
- [Overview](https://docs.neo.projectdiscovery.io/integrations/jira.md): Bring Neo into Jira and Confluence. Mention @neo on an issue, or ask Neo from a task, to triage, investigate, update, and act on the work.
- [Install & Connect](https://docs.neo.projectdiscovery.io/integrations/jira-install-and-connect.md): Connect Jira and Confluence to Neo, and manage reconnect, disconnect, and switching sites.
- [Usage](https://docs.neo.projectdiscovery.io/integrations/jira-use-neo-in-jira.md): Bring Neo into a Jira issue with @neo, ask it to investigate and act on the work, attach files, and read Confluence for context.
- [Admin & Permissions](https://docs.neo.projectdiscovery.io/integrations/jira-admin-and-permissions.md): Review the permissions Neo requests for Jira and Confluence, the bot model, and how admins manage the connection.
- [Troubleshooting](https://docs.neo.projectdiscovery.io/integrations/jira-troubleshooting.md): Fix Jira and Confluence connection states, awaiting-install, reconnects, and site switching.
- [Privacy & Support](https://docs.neo.projectdiscovery.io/integrations/jira-privacy-and-support.md): How Neo handles Jira and Confluence data, and where to get support and trust information.
- [PR Security Review](https://docs.neo.projectdiscovery.io/use-cases/code-reviews.md)
- [Threat Modeling](https://docs.neo.projectdiscovery.io/use-cases/threat-modeling.md)
- [SAST: Static Code Analysis](https://docs.neo.projectdiscovery.io/use-cases/sast.md)
- [Application Pentesting](https://docs.neo.projectdiscovery.io/use-cases/application-pentest.md)
- [DAST: Dynamic Application Testing](https://docs.neo.projectdiscovery.io/use-cases/dast.md)
- [APIs (REST, GraphQL)](https://docs.neo.projectdiscovery.io/use-cases/api-security.md)
- [Internal Network](https://docs.neo.projectdiscovery.io/use-cases/internal-network-pentest.md)
- [Mobile Apps](https://docs.neo.projectdiscovery.io/use-cases/mobile-app-pentest.md)
- [Cloud & Infrastructure Testing](https://docs.neo.projectdiscovery.io/use-cases/cloud-infrastructure.md)
- [External Attack Surface](https://docs.neo.projectdiscovery.io/use-cases/attack-surface-monitoring.md)
- [Vulnerability Triage](https://docs.neo.projectdiscovery.io/use-cases/vulnerability-review.md)
- [Patch Validation & Regression Testing](https://docs.neo.projectdiscovery.io/use-cases/patch-validation.md): Verify that fixes actually hold, catch bypasses before production, and detect regressions across future releases.
- [Security Reporting & Compliance](https://docs.neo.projectdiscovery.io/use-cases/security-reporting.md): Turn Neo's validated findings into reports for engineering, leadership, and auditors — with evidence that stands up to scrutiny.

## OpenAPI Specs

- [neo.public.openapi](/openapi/neo.public.openapi.json)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.