---
title: "Trigger Assessment"
method: POST
path: "/v1/assessments/run"
tags: ["Assessments"]
---

# Trigger Assessment

`POST /v1/assessments/run`

## Request

- Base URL: `https://api.mindfort.app`
- URL: `https://api.mindfort.app/v1/assessments/run`
- Auth: HTTP bearer

Requests a new security assessment against the specified target. Accepted assessments run asynchronously; review their status and available results in the MindFort dashboard.

## Request body

- TriggerAssessmentRequest
  - `target_id` string, uuid, required: UUID of the target to assess
  - `assessment_type` 'black-box' | 'white-box': Assessment mode. White-box includes code context and requires an enabled associated repository plus a GitHub App installation that can access it.
  - `assessment_method` 'balanced' | 'deep' | 'ultra': Assessment method. Balanced is the default; Deep and Ultra allow more time for investigation. Coverage depends on the target's scope, available access, and scenarios investigated.
  - `target_credential_id` string, uuid: UUID of the primary stored credential to use for authenticated testing
  - `secondary_target_credential_id` string, uuid: UUID of a different secondary stored credential for cross-account authorization testing; requires target_credential_id

## Response `200`

Assessment triggered successfully

- PublicRunAssessmentResponse
  - `message` string, required
  - `assessment_id` string, uuid, nullable
  - `target_id` string, uuid, required
  - `assessment_type` 'black-box' | 'white-box', required
  - `assessment_method` 'balanced' | 'deep' | 'ultra', required
  - `assessment_started` boolean, required

## Other responses

- `400`: Invalid request
- `401`: Unauthorized – missing or invalid API key
- `403`: Target not found or does not belong to this organization
- `409`: Assessment could not be started because the target is not currently startable, for example when another assessment is already running
- `429`: Rate limit exceeded
- `500`: Request could not be completed
- `502`: Request could not be completed

---

[API](https://skmtc.dev/mindfort/apis/mindfort-api.md) - [All operations](https://skmtc.dev/mindfort/apis/mindfort-api/llms.txt) - [OpenAPI document](https://skmtc.dev/mindfort/apis/mindfort-api/revisions/cb93bd79eebe?raw)