---
title: "Start a Website Audit"
method: POST
path: "/v1/website-audit/targets/{targetId}/scans"
tags: ["Website Audit"]
---

# Start a Website Audit

`POST /v1/website-audit/targets/{targetId}/scans`

## Request

- Base URL: `https://api.inth.com`
- URL: `https://api.inth.com/v1/website-audit/targets/{targetId}/scans`
- Auth: HTTP bearer

A stable requestId UUID v4 identifies retries. Spends credits under existing plan and ownership rules. The authoritative allow-audit-starts switch defaults true and returns 503 when paused. Reads remain available. Requires projects.read and website-audit.write and an organization admin or owner. New public writes are gated by rollout-agent-access-writes, default false.

## Path parameters

- `targetId` string, required

## Request body

- WebsiteScanStart
  - `requestId` string, uuid, required
  - `scope` 'free_preview' | 'full_audit'

## Response `202`

Success

- object
  - `success` unknown, required
  - `data` object, required
    - `status` 'started', required
    - `scanIds` string[], required

## Other responses

- `400`: The request payload or parameters are invalid.
- `401`: Authentication is missing, invalid, or expired.
- `403`: The credential is valid but may not perform the operation. `INSUFFICIENT_SCOPE`: the credential was never granted the capability the operation needs. `details.requiredScope` names it, and the `WWW-Authenticate` header carries `Bearer error="insufficient_scope"`. An OAuth client fixes this by requesting the scope; an organization API key cannot gain it. `FORBIDDEN`: the capability is present but the membership behind the credential lacks the role, or the resource belongs to another organization.
- `404`: The requested resource was not found.

## Changes

- **2026-10-31** `a3f4100e14c9`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/inth/apis/inth-api/changes/v1/website-audit/targets/:targetId/scans/post.md)

---

[API](https://skmtc.dev/inth/apis/inth-api.md) - [All operations](https://skmtc.dev/inth/apis/inth-api/llms.txt) - [OpenAPI document](https://skmtc.dev/inth/apis/inth-api/revisions/5a1be8d43402?raw)