---
title: "Get the API spec discovered by a scan"
method: GET
path: "/scans/{id}/endpoints"
---

# Get the API spec discovered by a scan

`GET /scans/{id}/endpoints`

## Request

- Base URL: `https://app.gecko.security/api/v1`
- URL: `https://app.gecko.security/api/v1/scans/{id}/endpoints`
- Auth: one of:
  - API key in header `X-API-Key`
  - HTTP bearer

## Path parameters

- `id` string, required

## Response `200`

Endpoints

- ScanEndpoints
  - `object` 'scan_endpoints', required
  - `scan_id` string, required
  - `format` 'json' | 'yaml' | 'null', nullable, required
  - `endpoints` string, nullable, required
  - `parsed` unknown, required

## Other responses

- `401`: Authentication error
- `403`: Authorization error
- `404`: Not found
- `429`: Rate limited

---

[API](https://skmtc.dev/gecko/apis/gecko-security-api.md) - [All operations](https://skmtc.dev/gecko/apis/gecko-security-api/llms.txt) - [OpenAPI document](https://skmtc.dev/gecko/apis/gecko-security-api/revisions/9da49dae8b07?raw)