---
title: "Trigger Live Scan"
method: POST
path: "/api/v1/livescan/{scannerId}/scan/"
tags: ["Live Scanning"]
---

# Trigger Live Scan

`POST /api/v1/livescan/{scannerId}/scan/`

## Request

- Base URL: `https://urlscan.io`
- URL: `https://urlscan.io/api/v1/livescan/{scannerId}/scan/`
- Auth: API key in header `api-key`

Task a URL to be scanned. The HTTP request will **block** until the scan has finished.

## Path parameters

- `scannerId` string, required

## Request body

- LivescanRequest
  - `task` object, required
    - `url` string, uri, required: URL to scan
    - `visibility` 'public' | 'unlisted' | 'private'
    - `tags` string[]: User-defined tags to annotate this scan, e.g. "phishing" or "malicious".
  - `scanner` object
    - `pageTimeout` integer: Time to wait for the whole scan process (in ms)
    - `captureDelay` integer: Delay after page has finished loading before capturing page content
    - `extraHeaders` object: Extra Key-Value headers to send via the HTTP headers
    - `enableFeatures` string[]
    - `disableFeatures` string[]
    - `evalScript` string: This Javascript snippet will be executed as the first item in the main page context
    - `userAgent` string: Custom User-Agent to use for the scan

## Response `200`

OK

- object
  - `uuid` string, uuid: UUID of scan

## Changes

- **2026-09-14** `d74ab24df9aa`: 2 info
  - added the new optional request property `scanner/evalScript`
  - added the new optional request property `scanner/userAgent`

[Operation history](https://skmtc.dev/urlscan/apis/urlscan-io-apis/changes/api/v1/livescan/:scannerId/scan/post.md)

---

[API](https://skmtc.dev/urlscan/apis/urlscan-io-apis.md) - [All operations](https://skmtc.dev/urlscan/apis/urlscan-io-apis/llms.txt) - [OpenAPI document](https://skmtc.dev/urlscan/apis/urlscan-io-apis/revisions/868c1c89a6e8?raw)