---
title: "Get Website Audit status"
method: GET
path: "/v1/website-audit/scans/{scanId}"
tags: ["Website Audit"]
---

# Get Website Audit status

`GET /v1/website-audit/scans/{scanId}`

## Request

- Base URL: `https://api.inth.com`
- URL: `https://api.inth.com/v1/website-audit/scans/{scanId}`
- Auth: HTTP bearer

Includes preview, scope, access tier, coverage and timestamps, independently of discovery history. Requires projects.read and website-audit.read.

## Path parameters

- `scanId` string, required

## Response `200`

Success

- object
  - `success` unknown, required
  - `data` WebsiteScan, required
    - `consentScenario` string, required
    - `coverage` object, required
      - `absenceClaimEligible` boolean, required
      - `attemptedPageCount` integer, required
      - `completedConditionCount` integer, required
      - `completedPageCount` integer, required
      - `failedPageCount` integer, required
      - `totalConditionCount` integer, required
    - `createdAt` string, required
    - `error` string, nullable, required
    - `id` string, required
    - `preview` boolean, required
    - `projectSlug` string, required
    - `regionProfile` string, required
    - `accessTier` 'unverified' | 'verified' | 'third_party'
    - `scope` 'free_preview' | 'full_audit'
    - `consentChecks` boolean
    - `startedBy` object
      - `name` string, required
    - `summary` object, required
      - `evidenceCount` integer, nullable, required
      - `pagesVisited` integer, nullable, required
      - `unknownEvidenceCount` integer, nullable, required
      - `vendorCount` integer, nullable, required
      - `vendorMatchCount` integer, nullable, required
    - `origin` string, nullable, required
    - `startedAt` string, required
    - `status` string, required
    - `completedAt` string, required
    - `trigger` string, required
    - `organizationId` string, required
    - `projectId` string, required
    - `targetId` string, nullable, required

## Other responses

- `400`: The request payload or parameters are invalid.
- `401`: Authentication is missing, invalid, or expired.
- `403`: The credential is valid but may not perform the operation. `INSUFFICIENT_SCOPE`: the credential was never granted the capability the operation needs. `details.requiredScope` names it, and the `WWW-Authenticate` header carries `Bearer error="insufficient_scope"`. An OAuth client fixes this by requesting the scope; an organization API key cannot gain it. `FORBIDDEN`: the capability is present but the membership behind the credential lacks the role, or the resource belongs to another organization.
- `404`: The requested resource was not found.

## Changes

- **2026-10-31** `a3f4100e14c9`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/inth/apis/inth-api/changes/v1/website-audit/scans/:scanId/get.md)

---

[API](https://skmtc.dev/inth/apis/inth-api.md) - [All operations](https://skmtc.dev/inth/apis/inth-api/llms.txt) - [OpenAPI document](https://skmtc.dev/inth/apis/inth-api/revisions/8741280c3463?raw)