---
title: "List pentest scope URLs"
method: GET
path: "/v1/pentests/{pentest_slug}/scope/urls/"
tags: ["pentests"]
---

# List pentest scope URLs

`GET /v1/pentests/{pentest_slug}/scope/urls/`

## Request

- Base URL: `https://api.ethiack.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.ethiack.com/v1/pentests/{pentest_slug}/scope/urls/`
- Auth: none declared

List the distinct URLs of the pentest's scoped assets.

Available to any caller authorized for the pentest's scope (not
machine-only, unlike the ``/urls`` listing).

Serves the in-scope half unless the gates say otherwise (see
:class:`PentestScopeUrlQuery`); wanting neither half is an empty
page, not a query that cannot match.

Args:
    pentest_slug (str): Public pentest identifier.
    db (AsyncSession): Request-scoped database session.
    context (ActiveContext): Resolved caller identity and scope.
    query (PentestScopeUrlQuery): Pagination + the two scope gates.
    pager (Paginator): Fills the response's navigation metadata.

Returns:
    PentestScopeUrlListResponse: The authorized, paginated scope
        URL list.

## Path parameters

- `pentest_slug` string, required

## Query parameters

- `page` integer
- `per_page` integer: Page size. Values above 500 are clamped to it (or rejected, per REST__PAGINATION__PER_PAGE_OVER_MAX).
- `in_scope` boolean: Include URLs of the pentest's in-scope assets.
- `out_of_scope` boolean: Include URLs of the pentest's out-of-scope assets.

## Response `200`

Successful Response

- PentestScopeUrlListResponse: List of URLs derived from assets in the pentest's scope. Attributes: urls (list[str]): URL strings (``scheme://host:port``).
  - `total` integer, nullable
  - `page` integer, nullable
  - `per_page` integer, nullable
  - `_links` object, nullable: RFC 8288 rel to URL. Always first; last unless the route opted out of counting; prev and next when applicable.
  - `urls` string[], required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/ethiack/apis/ethiack-api.md) - [All operations](https://skmtc.dev/ethiack/apis/ethiack-api/llms.txt) - [OpenAPI document](https://skmtc.dev/ethiack/apis/ethiack-api/revisions/4eaba89bfebf?raw)