---
title: "Get Application Scan"
method: GET
path: "/api/cmp/v1/applications/{id}/scans/{scanId}"
tags: ["Applications"]
---

# Get Application Scan

`GET /api/cmp/v1/applications/{id}/scans/{scanId}`

## Request

- Base URL: `https://hostname`
- URL: `https://hostname/api/cmp/v1/applications/{id}/scans/{scanId}`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://{hostname}/api/access/v1/oauth/token` scopes: `COOKIE_READ`

Use this API to retrieve the details of a single scan for a specific application. The response includes the scan's ID, status, date, and summary data for detected SDKs and permissions.

## Path parameters

- `id` string, uuid, required
- `scanId` string, uuid, required

## Response `200`

OK

- ApplicationScanDetailDto
  - `scanId` string, uuid: Unique identifier for this scan
  - `status` 'PENDING' | 'PROGRESS' | 'COMPLETED' | 'FAILED' | 'INTERRUPTED' | 'UNSCANNED': Status of this scan
  - `sdkCount` integer: Total number of SDKs found
  - `sdkCategories` object: SDK counts grouped by category
  - `permissionCount` integer: Total number of permissions found
  - `permissionCountHighRisk` integer: Number of high-risk permissions
  - `permissionCategories` object: Permission counts grouped by category
  - `scanDate` string, date-time: Date and time of the scan
  - `version` string: Detected version of the given application
  - `engineVersion` string: OneTrust mobile scan engine version used for this scan

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `429`: Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500`: Internal Server Error

---

[API](https://skmtc.dev/onetrust/apis/consent-preferences-cookie-consent.md) - [All operations](https://skmtc.dev/onetrust/apis/consent-preferences-cookie-consent/llms.txt) - [OpenAPI document](https://skmtc.dev/onetrust/apis/consent-preferences-cookie-consent/revisions/b4fb4606f973?raw)