--- title: Vulnerability Scanner --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/typescript) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Vulnerability Scanner #### Vulnerability ScannerCredential Sets ##### [List credential sets](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/credential_sets/methods/list) client.vulnerabilityScanner.credentialSets.list(CredentialSetListParams {account\_id, page, per\_page } params, RequestOptionsoptions?): V4PagePaginationArray< [CredentialSetListResponse]() {id, name } > GET/accounts/{account\_id}/vuln\_scanner/credential\_sets ##### [Create credential set](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/credential_sets/methods/create) client.vulnerabilityScanner.credentialSets.create(CredentialSetCreateParams {account\_id, name } params, RequestOptionsoptions?): [CredentialSetCreateResponse]() {id, name } POST/accounts/{account\_id}/vuln\_scanner/credential\_sets ##### [Get credential set](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/credential_sets/methods/get) client.vulnerabilityScanner.credentialSets.get(stringcredentialSetID, CredentialSetGetParams {account\_id } params, RequestOptionsoptions?): [CredentialSetGetResponse]() {id, name } GET/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id} ##### [Update credential set](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/credential_sets/methods/update) client.vulnerabilityScanner.credentialSets.update(stringcredentialSetID, CredentialSetUpdateParams {account\_id, name } params, RequestOptionsoptions?): [CredentialSetUpdateResponse]() {id, name } PUT/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id} ##### [Edit credential set](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/credential_sets/methods/edit) client.vulnerabilityScanner.credentialSets.edit(stringcredentialSetID, CredentialSetEditParams {account\_id, name } params, RequestOptionsoptions?): [CredentialSetEditResponse]() {id, name } PATCH/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id} ##### [Delete credential set](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/credential_sets/methods/delete) client.vulnerabilityScanner.credentialSets.delete(stringcredentialSetID, CredentialSetDeleteParams {account\_id } params, RequestOptionsoptions?): [CredentialSetDeleteResponse]()| null DELETE/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id} ##### ModelsExpand Collapse
CredentialSetListResponse {id, name } id: string Credential set identifier. formatuuid Link to this property name: string Human-readable name. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_list_response%20%3E%20(schema)>)
CredentialSetCreateResponse {id, name } id: string Credential set identifier. formatuuid Link to this property name: string Human-readable name. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_create_response%20%3E%20(schema)>)
CredentialSetGetResponse {id, name } id: string Credential set identifier. formatuuid Link to this property name: string Human-readable name. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_get_response%20%3E%20(schema)>)
CredentialSetUpdateResponse {id, name } id: string Credential set identifier. formatuuid Link to this property name: string Human-readable name. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_update_response%20%3E%20(schema)>)
CredentialSetEditResponse {id, name } id: string Credential set identifier. formatuuid Link to this property name: string Human-readable name. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_edit_response%20%3E%20(schema)>) CredentialSetDeleteResponse = unknown [Link to this property](<#(resource)%20vulnerability_scanner.credential_sets%20%3E%20(model)%20credential_set_delete_response%20%3E%20(schema)>) #### Vulnerability ScannerCredential SetsCredentials ##### [List credentials](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/credential_sets/subresources/credentials/methods/list) client.vulnerabilityScanner.credentialSets.credentials.list(stringcredentialSetID, CredentialListParams {account\_id, page, per\_page } params, RequestOptionsoptions?): V4PagePaginationArray< [CredentialListResponse]() {id, credential\_set\_id, location, 2 more } > GET/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}/credentials ##### [Create credential](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/credential_sets/subresources/credentials/methods/create) client.vulnerabilityScanner.credentialSets.credentials.create(stringcredentialSetID, CredentialCreateParams {account\_id, location, location\_name, 2 more } params, RequestOptionsoptions?): [CredentialCreateResponse]() {id, credential\_set\_id, location, 2 more } POST/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}/credentials ##### [Get credential](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/credential_sets/subresources/credentials/methods/get) client.vulnerabilityScanner.credentialSets.credentials.get(stringcredentialID, CredentialGetParams {account\_id, credential\_set\_id } params, RequestOptionsoptions?): [CredentialGetResponse]() {id, credential\_set\_id, location, 2 more } GET/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}/credentials/{credential\_id} ##### [Update credential](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/credential_sets/subresources/credentials/methods/update) client.vulnerabilityScanner.credentialSets.credentials.update(stringcredentialID, CredentialUpdateParams {account\_id, credential\_set\_id, location, 3 more } params, RequestOptionsoptions?): [CredentialUpdateResponse]() {id, credential\_set\_id, location, 2 more } PUT/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}/credentials/{credential\_id} ##### [Edit credential](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/credential_sets/subresources/credentials/methods/edit) client.vulnerabilityScanner.credentialSets.credentials.edit(stringcredentialID, CredentialEditParams {account\_id, credential\_set\_id, location, 3 more } params, RequestOptionsoptions?): [CredentialEditResponse]() {id, credential\_set\_id, location, 2 more } PATCH/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}/credentials/{credential\_id} ##### [Delete credential](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/credential_sets/subresources/credentials/methods/delete) client.vulnerabilityScanner.credentialSets.credentials.delete(stringcredentialID, CredentialDeleteParams {account\_id, credential\_set\_id } params, RequestOptionsoptions?): [CredentialDeleteResponse]()| null DELETE/accounts/{account\_id}/vuln\_scanner/credential\_sets/{credential\_set\_id}/credentials/{credential\_id} ##### ModelsExpand Collapse
CredentialListResponse {id, credential\_set\_id, location, 2 more } A credential attached to API requests during scanning. The credential value is write-only and never returned in responses. id: string Credential identifier. formatuuid Link to this property credential\_set\_id: string Parent credential set identifier. formatuuid Link to this property
location: "header"| "cookie" Where the credential is attached in outgoing requests. One of the following: "header" Link to this property "cookie" Link to this property
Link to this property location\_name: string Name of the header or cookie where the credential is attached. Link to this property name: string Human-readable name. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_list_response%20%3E%20(schema)>)
CredentialCreateResponse {id, credential\_set\_id, location, 2 more } A credential attached to API requests during scanning. The credential value is write-only and never returned in responses. id: string Credential identifier. formatuuid Link to this property credential\_set\_id: string Parent credential set identifier. formatuuid Link to this property
location: "header"| "cookie" Where the credential is attached in outgoing requests. One of the following: "header" Link to this property "cookie" Link to this property
Link to this property location\_name: string Name of the header or cookie where the credential is attached. Link to this property name: string Human-readable name. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_create_response%20%3E%20(schema)>)
CredentialGetResponse {id, credential\_set\_id, location, 2 more } A credential attached to API requests during scanning. The credential value is write-only and never returned in responses. id: string Credential identifier. formatuuid Link to this property credential\_set\_id: string Parent credential set identifier. formatuuid Link to this property
location: "header"| "cookie" Where the credential is attached in outgoing requests. One of the following: "header" Link to this property "cookie" Link to this property
Link to this property location\_name: string Name of the header or cookie where the credential is attached. Link to this property name: string Human-readable name. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_get_response%20%3E%20(schema)>)
CredentialUpdateResponse {id, credential\_set\_id, location, 2 more } A credential attached to API requests during scanning. The credential value is write-only and never returned in responses. id: string Credential identifier. formatuuid Link to this property credential\_set\_id: string Parent credential set identifier. formatuuid Link to this property
location: "header"| "cookie" Where the credential is attached in outgoing requests. One of the following: "header" Link to this property "cookie" Link to this property
Link to this property location\_name: string Name of the header or cookie where the credential is attached. Link to this property name: string Human-readable name. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_update_response%20%3E%20(schema)>)
CredentialEditResponse {id, credential\_set\_id, location, 2 more } A credential attached to API requests during scanning. The credential value is write-only and never returned in responses. id: string Credential identifier. formatuuid Link to this property credential\_set\_id: string Parent credential set identifier. formatuuid Link to this property
location: "header"| "cookie" Where the credential is attached in outgoing requests. One of the following: "header" Link to this property "cookie" Link to this property
Link to this property location\_name: string Name of the header or cookie where the credential is attached. Link to this property name: string Human-readable name. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_edit_response%20%3E%20(schema)>) CredentialDeleteResponse = unknown [Link to this property](<#(resource)%20vulnerability_scanner.credential_sets.credentials%20%3E%20(model)%20credential_delete_response%20%3E%20(schema)>) #### Vulnerability ScannerScans ##### [List scans](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/scans/methods/list) client.vulnerabilityScanner.scans.list(ScanListParams {account\_id, page, per\_page } params, RequestOptionsoptions?): V4PagePaginationArray< [ScanListResponse]() {id, scan\_type, status, 2 more } > GET/accounts/{account\_id}/vuln\_scanner/scans ##### [Create scan](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/scans/methods/create) client.vulnerabilityScanner.scans.create(ScanCreateParams {account\_id, credential\_sets, open\_api, 2 more } params, RequestOptionsoptions?): [ScanCreateResponse]() {id, scan\_type, status, 2 more } POST/accounts/{account\_id}/vuln\_scanner/scans ##### [Get scan](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/scans/methods/get) client.vulnerabilityScanner.scans.get(stringscanID, ScanGetParams {account\_id } params, RequestOptionsoptions?): [ScanGetResponse]() {id, scan\_type, status, 2 more } GET/accounts/{account\_id}/vuln\_scanner/scans/{scan\_id} ##### ModelsExpand Collapse
ScanListResponse {id, scan\_type, status, 2 more } id: string Scan identifier. formatuuid Link to this property scan\_type: "bola" The type of vulnerability scan. Link to this property
status: "created"| "scheduled"| "planning"| 3 more Current lifecycle status of the scan. One of the following: "created" Link to this property "scheduled" Link to this property "planning" Link to this property "running" Link to this property "finished" Link to this property "failed" Link to this property
Link to this property target\_environment\_id: string The target environment this scan runs against. formatuuid Link to this property
report?: Report| null Vulnerability report produced after the scan completes. The shape depends on the scan type. Present only for finished scans.
report: Report {summary, tests } Version 1 of the BOLA vulnerability scan report.
summary: Summary {verdict } Summary of all steps and findings.
verdict: "ok"| "warning"| "inconclusive" Overall verdict of the vulnerability scan. One of the following: "ok" Link to this property "warning" Link to this property "inconclusive" Link to this property
Link to this property
Link to this property
tests: Array<Test> List of tests that were run.
steps: Array<Step> Steps that were executed.
assertions: Array<Assertion> Assertions that were made against the received response. description: string Human-readable description of the assertion, explaining what was checked. Link to this property
kind: Kind {parameters, type } Kind of assertion.
parameters: Parameters {max, min } Range of HTTP status codes. max: number Maximum (inclusive) status code of the range. maximum65535 minimum0 Link to this property min: number Minimum (inclusive) status code of the range. maximum65535 minimum0 Link to this property
Link to this property type: "http\_status\_within\_range" Link to this property
Link to this property observed: number| null Observed value on which the assertion was made. Link to this property
outcome: "ok"| "fail"| "inconclusive" Outcome of the assertion. One of the following: "ok" Link to this property "fail" Link to this property "inconclusive" Link to this property
Link to this property
Link to this property
errors?: Array<Error> Errors the step encountered that may explain absent or incomplete fields. description: string Human-readable error description. Link to this property error\_code?: number| null Numeric error code identifying the class of error, if available. formatuint32 minimum0 Link to this property
Link to this property
request?: Request| null HTTP request that was made, if any.
credential\_set: CredentialSet {id, role } Credential set that was used. id: string ID of the credential set. formatuuid Link to this property
role: "owner"| "attacker" Role of the credential set. One of the following: "owner" Link to this property "attacker" Link to this property
Link to this property
Link to this property header\_names: Array<string> Names of headers that were sent. Link to this property
method: "GET"| "DELETE"| "PATCH"| 2 more HTTP method. One of the following: "GET" Link to this property "DELETE" Link to this property "PATCH" Link to this property "POST" Link to this property "PUT" Link to this property
Link to this property url: string Exact and full URL (including host, query parameters) that was requested. formaturi Link to this property
variable\_captures: Array<VariableCapture> Variable captures requested for this step. json\_path: string JSONPath expression used for capture, e.g. "$.id". Link to this property name: string Variable name, e.g. "resource_id". Link to this property
Link to this property body?: unknown Request body, if any. Link to this property
Link to this property
response?: Response| null HTTP response that was received, if any.
body: VulnScannerBOLABodyResponseNotFound {kind } | VulnScannerBOLABodyResponseBytes {contents, kind, truncated } | VulnScannerBOLABodyResponseText {contents, kind, truncated } | VulnScannerBOLABodyResponseJson {contents, kind, truncated } HTTP response body. One of the following:
VulnScannerBOLABodyResponseNotFound {kind } No body was received. kind: "not\_found" Link to this property
Link to this property
VulnScannerBOLABodyResponseBytes {contents, kind, truncated } Body received but unable to read as UTF-8. Raw bytes, base64-encoded. contents: string Link to this property kind: "bytes" Link to this property truncated: boolean Link to this property
Link to this property
VulnScannerBOLABodyResponseText {contents, kind, truncated } Body received as valid UTF-8 text but not valid JSON. contents: string Link to this property kind: "text" Link to this property truncated: boolean Link to this property
Link to this property
VulnScannerBOLABodyResponseJson {contents, kind, truncated } Body received as valid JSON. contents: string Link to this property kind: "json" Link to this property truncated: boolean Link to this property
Link to this property
Link to this property header\_names: Array<string> Names of headers that were received. Link to this property status: number HTTP status code. maximum65535 minimum0 Link to this property status\_text?: string| null HTTP status text, if available for the status code. Link to this property
Link to this property
Link to this property
verdict: "ok"| "warning"| "inconclusive" Verdict of this single test. One of the following: "ok" Link to this property "warning" Link to this property "inconclusive" Link to this property
Link to this property
preflight\_errors?: Array<PreflightError> Errors that prevented step execution. description: string Human-readable error description. Link to this property error\_code?: number| null Numeric error code identifying the class of error, if available. formatuint32 minimum0 Link to this property
Link to this property
Link to this property
Link to this property report\_schema\_version: "v1" Version of the report schema. Link to this property
Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.scans%20%3E%20(model)%20scan_list_response%20%3E%20(schema)>)
ScanCreateResponse {id, scan\_type, status, 2 more } id: string Scan identifier. formatuuid Link to this property scan\_type: "bola" The type of vulnerability scan. Link to this property
status: "created"| "scheduled"| "planning"| 3 more Current lifecycle status of the scan. One of the following: "created" Link to this property "scheduled" Link to this property "planning" Link to this property "running" Link to this property "finished" Link to this property "failed" Link to this property
Link to this property target\_environment\_id: string The target environment this scan runs against. formatuuid Link to this property
report?: Report| null Vulnerability report produced after the scan completes. The shape depends on the scan type. Present only for finished scans.
report: Report {summary, tests } Version 1 of the BOLA vulnerability scan report.
summary: Summary {verdict } Summary of all steps and findings.
verdict: "ok"| "warning"| "inconclusive" Overall verdict of the vulnerability scan. One of the following: "ok" Link to this property "warning" Link to this property "inconclusive" Link to this property
Link to this property
Link to this property
tests: Array<Test> List of tests that were run.
steps: Array<Step> Steps that were executed.
assertions: Array<Assertion> Assertions that were made against the received response. description: string Human-readable description of the assertion, explaining what was checked. Link to this property
kind: Kind {parameters, type } Kind of assertion.
parameters: Parameters {max, min } Range of HTTP status codes. max: number Maximum (inclusive) status code of the range. maximum65535 minimum0 Link to this property min: number Minimum (inclusive) status code of the range. maximum65535 minimum0 Link to this property
Link to this property type: "http\_status\_within\_range" Link to this property
Link to this property observed: number| null Observed value on which the assertion was made. Link to this property
outcome: "ok"| "fail"| "inconclusive" Outcome of the assertion. One of the following: "ok" Link to this property "fail" Link to this property "inconclusive" Link to this property
Link to this property
Link to this property
errors?: Array<Error> Errors the step encountered that may explain absent or incomplete fields. description: string Human-readable error description. Link to this property error\_code?: number| null Numeric error code identifying the class of error, if available. formatuint32 minimum0 Link to this property
Link to this property
request?: Request| null HTTP request that was made, if any.
credential\_set: CredentialSet {id, role } Credential set that was used. id: string ID of the credential set. formatuuid Link to this property
role: "owner"| "attacker" Role of the credential set. One of the following: "owner" Link to this property "attacker" Link to this property
Link to this property
Link to this property header\_names: Array<string> Names of headers that were sent. Link to this property
method: "GET"| "DELETE"| "PATCH"| 2 more HTTP method. One of the following: "GET" Link to this property "DELETE" Link to this property "PATCH" Link to this property "POST" Link to this property "PUT" Link to this property
Link to this property url: string Exact and full URL (including host, query parameters) that was requested. formaturi Link to this property
variable\_captures: Array<VariableCapture> Variable captures requested for this step. json\_path: string JSONPath expression used for capture, e.g. "$.id". Link to this property name: string Variable name, e.g. "resource_id". Link to this property
Link to this property body?: unknown Request body, if any. Link to this property
Link to this property
response?: Response| null HTTP response that was received, if any.
body: VulnScannerBOLABodyResponseNotFound {kind } | VulnScannerBOLABodyResponseBytes {contents, kind, truncated } | VulnScannerBOLABodyResponseText {contents, kind, truncated } | VulnScannerBOLABodyResponseJson {contents, kind, truncated } HTTP response body. One of the following:
VulnScannerBOLABodyResponseNotFound {kind } No body was received. kind: "not\_found" Link to this property
Link to this property
VulnScannerBOLABodyResponseBytes {contents, kind, truncated } Body received but unable to read as UTF-8. Raw bytes, base64-encoded. contents: string Link to this property kind: "bytes" Link to this property truncated: boolean Link to this property
Link to this property
VulnScannerBOLABodyResponseText {contents, kind, truncated } Body received as valid UTF-8 text but not valid JSON. contents: string Link to this property kind: "text" Link to this property truncated: boolean Link to this property
Link to this property
VulnScannerBOLABodyResponseJson {contents, kind, truncated } Body received as valid JSON. contents: string Link to this property kind: "json" Link to this property truncated: boolean Link to this property
Link to this property
Link to this property header\_names: Array<string> Names of headers that were received. Link to this property status: number HTTP status code. maximum65535 minimum0 Link to this property status\_text?: string| null HTTP status text, if available for the status code. Link to this property
Link to this property
Link to this property
verdict: "ok"| "warning"| "inconclusive" Verdict of this single test. One of the following: "ok" Link to this property "warning" Link to this property "inconclusive" Link to this property
Link to this property
preflight\_errors?: Array<PreflightError> Errors that prevented step execution. description: string Human-readable error description. Link to this property error\_code?: number| null Numeric error code identifying the class of error, if available. formatuint32 minimum0 Link to this property
Link to this property
Link to this property
Link to this property report\_schema\_version: "v1" Version of the report schema. Link to this property
Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.scans%20%3E%20(model)%20scan_create_response%20%3E%20(schema)>)
ScanGetResponse {id, scan\_type, status, 2 more } id: string Scan identifier. formatuuid Link to this property scan\_type: "bola" The type of vulnerability scan. Link to this property
status: "created"| "scheduled"| "planning"| 3 more Current lifecycle status of the scan. One of the following: "created" Link to this property "scheduled" Link to this property "planning" Link to this property "running" Link to this property "finished" Link to this property "failed" Link to this property
Link to this property target\_environment\_id: string The target environment this scan runs against. formatuuid Link to this property
report?: Report| null Vulnerability report produced after the scan completes. The shape depends on the scan type. Present only for finished scans.
report: Report {summary, tests } Version 1 of the BOLA vulnerability scan report.
summary: Summary {verdict } Summary of all steps and findings.
verdict: "ok"| "warning"| "inconclusive" Overall verdict of the vulnerability scan. One of the following: "ok" Link to this property "warning" Link to this property "inconclusive" Link to this property
Link to this property
Link to this property
tests: Array<Test> List of tests that were run.
steps: Array<Step> Steps that were executed.
assertions: Array<Assertion> Assertions that were made against the received response. description: string Human-readable description of the assertion, explaining what was checked. Link to this property
kind: Kind {parameters, type } Kind of assertion.
parameters: Parameters {max, min } Range of HTTP status codes. max: number Maximum (inclusive) status code of the range. maximum65535 minimum0 Link to this property min: number Minimum (inclusive) status code of the range. maximum65535 minimum0 Link to this property
Link to this property type: "http\_status\_within\_range" Link to this property
Link to this property observed: number| null Observed value on which the assertion was made. Link to this property
outcome: "ok"| "fail"| "inconclusive" Outcome of the assertion. One of the following: "ok" Link to this property "fail" Link to this property "inconclusive" Link to this property
Link to this property
Link to this property
errors?: Array<Error> Errors the step encountered that may explain absent or incomplete fields. description: string Human-readable error description. Link to this property error\_code?: number| null Numeric error code identifying the class of error, if available. formatuint32 minimum0 Link to this property
Link to this property
request?: Request| null HTTP request that was made, if any.
credential\_set: CredentialSet {id, role } Credential set that was used. id: string ID of the credential set. formatuuid Link to this property
role: "owner"| "attacker" Role of the credential set. One of the following: "owner" Link to this property "attacker" Link to this property
Link to this property
Link to this property header\_names: Array<string> Names of headers that were sent. Link to this property
method: "GET"| "DELETE"| "PATCH"| 2 more HTTP method. One of the following: "GET" Link to this property "DELETE" Link to this property "PATCH" Link to this property "POST" Link to this property "PUT" Link to this property
Link to this property url: string Exact and full URL (including host, query parameters) that was requested. formaturi Link to this property
variable\_captures: Array<VariableCapture> Variable captures requested for this step. json\_path: string JSONPath expression used for capture, e.g. "$.id". Link to this property name: string Variable name, e.g. "resource_id". Link to this property
Link to this property body?: unknown Request body, if any. Link to this property
Link to this property
response?: Response| null HTTP response that was received, if any.
body: VulnScannerBOLABodyResponseNotFound {kind } | VulnScannerBOLABodyResponseBytes {contents, kind, truncated } | VulnScannerBOLABodyResponseText {contents, kind, truncated } | VulnScannerBOLABodyResponseJson {contents, kind, truncated } HTTP response body. One of the following:
VulnScannerBOLABodyResponseNotFound {kind } No body was received. kind: "not\_found" Link to this property
Link to this property
VulnScannerBOLABodyResponseBytes {contents, kind, truncated } Body received but unable to read as UTF-8. Raw bytes, base64-encoded. contents: string Link to this property kind: "bytes" Link to this property truncated: boolean Link to this property
Link to this property
VulnScannerBOLABodyResponseText {contents, kind, truncated } Body received as valid UTF-8 text but not valid JSON. contents: string Link to this property kind: "text" Link to this property truncated: boolean Link to this property
Link to this property
VulnScannerBOLABodyResponseJson {contents, kind, truncated } Body received as valid JSON. contents: string Link to this property kind: "json" Link to this property truncated: boolean Link to this property
Link to this property
Link to this property header\_names: Array<string> Names of headers that were received. Link to this property status: number HTTP status code. maximum65535 minimum0 Link to this property status\_text?: string| null HTTP status text, if available for the status code. Link to this property
Link to this property
Link to this property
verdict: "ok"| "warning"| "inconclusive" Verdict of this single test. One of the following: "ok" Link to this property "warning" Link to this property "inconclusive" Link to this property
Link to this property
preflight\_errors?: Array<PreflightError> Errors that prevented step execution. description: string Human-readable error description. Link to this property error\_code?: number| null Numeric error code identifying the class of error, if available. formatuint32 minimum0 Link to this property
Link to this property
Link to this property
Link to this property report\_schema\_version: "v1" Version of the report schema. Link to this property
Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.scans%20%3E%20(model)%20scan_get_response%20%3E%20(schema)>) #### Vulnerability ScannerTarget Environments ##### [List target environments](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/target_environments/methods/list) client.vulnerabilityScanner.targetEnvironments.list(TargetEnvironmentListParams {account\_id, page, per\_page } params, RequestOptionsoptions?): V4PagePaginationArray< [TargetEnvironmentListResponse]() {id, name, target, description } > GET/accounts/{account\_id}/vuln\_scanner/target\_environments ##### [Create target environment](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/target_environments/methods/create) client.vulnerabilityScanner.targetEnvironments.create(TargetEnvironmentCreateParams {account\_id, name, target, description } params, RequestOptionsoptions?): [TargetEnvironmentCreateResponse]() {id, name, target, description } POST/accounts/{account\_id}/vuln\_scanner/target\_environments ##### [Get target environment](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/target_environments/methods/get) client.vulnerabilityScanner.targetEnvironments.get(stringtargetEnvironmentID, TargetEnvironmentGetParams {account\_id } params, RequestOptionsoptions?): [TargetEnvironmentGetResponse]() {id, name, target, description } GET/accounts/{account\_id}/vuln\_scanner/target\_environments/{target\_environment\_id} ##### [Update target environment](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/target_environments/methods/update) client.vulnerabilityScanner.targetEnvironments.update(stringtargetEnvironmentID, TargetEnvironmentUpdateParams {account\_id, name, target, description } params, RequestOptionsoptions?): [TargetEnvironmentUpdateResponse]() {id, name, target, description } PUT/accounts/{account\_id}/vuln\_scanner/target\_environments/{target\_environment\_id} ##### [Edit target environment](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/target_environments/methods/edit) client.vulnerabilityScanner.targetEnvironments.edit(stringtargetEnvironmentID, TargetEnvironmentEditParams {account\_id, description, name, target } params, RequestOptionsoptions?): [TargetEnvironmentEditResponse]() {id, name, target, description } PATCH/accounts/{account\_id}/vuln\_scanner/target\_environments/{target\_environment\_id} ##### [Delete target environment](https://developers.cloudflare.com/api/typescript/resources/vulnerability_scanner/subresources/target_environments/methods/delete) client.vulnerabilityScanner.targetEnvironments.delete(stringtargetEnvironmentID, TargetEnvironmentDeleteParams {account\_id } params, RequestOptionsoptions?): [TargetEnvironmentDeleteResponse]()| null DELETE/accounts/{account\_id}/vuln\_scanner/target\_environments/{target\_environment\_id} ##### ModelsExpand Collapse
TargetEnvironmentListResponse {id, name, target, description } id: string Target environment identifier. formatuuid Link to this property name: string Human-readable name. Link to this property
target: Target {type, zone\_tag } Identifies the Cloudflare asset to scan. Uses a type discriminator. Currently the service supports only zone targets. type: "zone" Link to this property zone\_tag: string Cloudflare zone tag. The zone must belong to the account. maxLength32 Link to this property
Link to this property description?: string| null Optional description providing additional context. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.target_environments%20%3E%20(model)%20target_environment_list_response%20%3E%20(schema)>)
TargetEnvironmentCreateResponse {id, name, target, description } id: string Target environment identifier. formatuuid Link to this property name: string Human-readable name. Link to this property
target: Target {type, zone\_tag } Identifies the Cloudflare asset to scan. Uses a type discriminator. Currently the service supports only zone targets. type: "zone" Link to this property zone\_tag: string Cloudflare zone tag. The zone must belong to the account. maxLength32 Link to this property
Link to this property description?: string| null Optional description providing additional context. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.target_environments%20%3E%20(model)%20target_environment_create_response%20%3E%20(schema)>)
TargetEnvironmentGetResponse {id, name, target, description } id: string Target environment identifier. formatuuid Link to this property name: string Human-readable name. Link to this property
target: Target {type, zone\_tag } Identifies the Cloudflare asset to scan. Uses a type discriminator. Currently the service supports only zone targets. type: "zone" Link to this property zone\_tag: string Cloudflare zone tag. The zone must belong to the account. maxLength32 Link to this property
Link to this property description?: string| null Optional description providing additional context. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.target_environments%20%3E%20(model)%20target_environment_get_response%20%3E%20(schema)>)
TargetEnvironmentUpdateResponse {id, name, target, description } id: string Target environment identifier. formatuuid Link to this property name: string Human-readable name. Link to this property
target: Target {type, zone\_tag } Identifies the Cloudflare asset to scan. Uses a type discriminator. Currently the service supports only zone targets. type: "zone" Link to this property zone\_tag: string Cloudflare zone tag. The zone must belong to the account. maxLength32 Link to this property
Link to this property description?: string| null Optional description providing additional context. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.target_environments%20%3E%20(model)%20target_environment_update_response%20%3E%20(schema)>)
TargetEnvironmentEditResponse {id, name, target, description } id: string Target environment identifier. formatuuid Link to this property name: string Human-readable name. Link to this property
target: Target {type, zone\_tag } Identifies the Cloudflare asset to scan. Uses a type discriminator. Currently the service supports only zone targets. type: "zone" Link to this property zone\_tag: string Cloudflare zone tag. The zone must belong to the account. maxLength32 Link to this property
Link to this property description?: string| null Optional description providing additional context. Link to this property
[Link to this property](<#(resource)%20vulnerability_scanner.target_environments%20%3E%20(model)%20target_environment_edit_response%20%3E%20(schema)>) TargetEnvironmentDeleteResponse = unknown [Link to this property](<#(resource)%20vulnerability_scanner.target_environments%20%3E%20(model)%20target_environment_delete_response%20%3E%20(schema)>)