---
title: "Launch a hackbrowser crawl"
method: POST
path: "/session/{sessionID}/hackbrowser/launch"
---

# Launch a hackbrowser crawl

`POST /session/{sessionID}/hackbrowser/launch`

Start a hackbrowser crawl for a session from an interactive entry point (TUI slash, CLI subcommand). Same backend as the LLM-callable hackbrowser tool — agent invocation, slash, and CLI all share this surface. Returns a KickOffResult; captures stream into the session asynchronously.

## Path parameters

- `sessionID` string, required

## Query parameters

- `directory` string

## Request body

- object
  - `target` string, uri, required
  - `credentials` string[]
  - `scope` string[]
  - `exclude` string[]
  - `steps` integer
  - `headless` boolean

## Response `200`

Crawl successfully kicked off; returns sessionID + started flag + status message

- object
  - `sessionID` string, required
  - `started` boolean, required
  - `message` string, required

## Other responses

- `400` — Bad request
- `404` — Not found

## Changes

- **2026-04-29** `ba1ceff8b2ff` — 1 info
  - endpoint added
- **2026-04-29** `3e3822f627bd` — 1 breaking
  - api path removed without deprecation
- **2026-04-29** `ba1ceff8b2ff` — 1 info
  - endpoint added
- **2026-04-28** `3e3822f627bd` — 1 breaking
  - api path removed without deprecation
- **2026-04-28** `ba1ceff8b2ff` — 1 info
  - endpoint added

[Full history](https://skmtc.dev/cyberstrikeus/apis/cyberstrike/changes/session/:sessionID/hackbrowser/launch/post.md)

---

[API](https://skmtc.dev/cyberstrikeus/apis/cyberstrike.md) · [All operations](https://skmtc.dev/cyberstrikeus/apis/cyberstrike/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cyberstrikeus/cyberstrike/revisions/706ec7deddfd/schema)