CentralCSP
APIScans

List your saved scans

Lists the scans you ran in this workspace, newest first. Only your own scans are listed. Anyone holding a scan's scanResultId can read its result, so treat results as shareable.

Limited to 120 requests a minute for each person, after which it answers 429 with a Retry-After header. Listing and reading scans share this limit.

Requires membership of the workspace.

GET
/v1/workspaces/{workspaceId}/scans

Authorization

headerAuthorizationBearer <JWT>

An OpenID Connect access token from signing in to CentralCSP, acting as the signed-in user.

Path Parameters

workspaceId*string

The workspace's id.

Query Parameters

cursor?string

The nextCursor of the previous page. Omit it to start from the beginning. A cursor encodes a position and is not meant to be built by hand.

limit*|

How many items to return, from 1 to 200.

Range1 <= value <= 200
Default50
tool*string

Which scanner produced the scan. csp-scanner grades the Content Security Policy, header-scanner grades every security header, and reporting-api checks the reporting setup.

Value in"csp-scanner""header-scanner""reporting-api"
search?string

Keeps only scans whose target contains this.

state?array<>

Keeps only scans in one of these states. Repeat the parameter for several.

Response Body

A page of scans.

application/json
  1. response
data*array<>

The scans on this page.

pagination*

Where this page sits in the full result set.

Example Request
curl -X GET 'https://api.centralcsp.com/v1/workspaces/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/scans?limit=50&tool=csp-scanner'
Example Response
{  "data": [    {      "scanId": "01a09f1b-76f9-7499-8734-038798d60789",      "tool": "csp-scanner",      "target": "example.com",      "status": "done",      "state": "completed",      "outcome": "no_host",      "error": "bot protection interstitial detected",      "httpStatus": 403,      "urlAnalyzed": "https://example.com/",      "followRedirects": true,      "scanResultId": "11132a50-38c2-4554-b967-40e599a28163",      "scores": {        "overall": 37,        "security": 17,        "quality": 94      },      "findings": {        "critical": 0,        "high": 3,        "medium": 7,        "low": 3,        "info": 6,        "total": 19      },      "createdAt": "2026-09-14T08:49:32.409Z",      "finishedAt": "2026-09-14T08:49:32.830Z"    }  ],  "pagination": {    "nextCursor": "string",    "hasMore": true,    "total": 0  }}

List reported policies GET

Lists the distinct policies browsers reported as in force when a violation occurred, with how often each was seen and whether it was enforced or report-only.

Run a scan POST

Starts a scan of a website and saves it to your history. It answers straight away with the scan at running.