---
title: "Run compliance scan"
method: POST
path: "/compliance/scan"
tags: ["compliance"]
---

# Run compliance scan

`POST /compliance/scan`

## Request

- Base URL: `https://catalyst.stratogenic.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://catalyst.stratogenic.ai/compliance/scan`
- Auth: API key in header `X-API-Key`

Runs a compliance scan using all ingested compliance sources.

The scan detects compliance signals, generates findings, and compares results against previous scans to identify new issues.

Results are stored for retrieval and may trigger events for automation and alerting.

Requires scan entitlement.

## Headers

- `X-User-Id` string, nullable
- `X-Source-App` string, nullable
- `X-Touched-By-Tool` string, nullable
- `X-Touched-By-User` string, nullable
- `X-Touched-By-Agent` string, nullable
- `X-External-User-Id` string, nullable
- `X-Run-Id` string, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/stratogenic/apis/stratogenic-catalyst-api.md) · [All operations](https://skmtc.dev/stratogenic/apis/stratogenic-catalyst-api/llms.txt) · [OpenAPI document](https://skmtc.dev/stratogenic/apis/stratogenic-catalyst-api/revisions/ad906ad7a85d?raw)