---
title: "Private Scan URL"
method: POST
path: "/urls"
tags: ["Private URLs"]
---

# Private Scan URL

`POST /urls`

## Request

- Base URL: `https://www.virustotal.com/api/v3/private`
- URL: `https://www.virustotal.com/api/v3/private/urls`
- Auth: none required

## Headers

- `x-apikey` string, required

## Request body `application/x-www-form-urlencoded`

- object
  - `url` string, required: URL to scan.
  - `user_agent` string: User agent string.
  - `sandboxes` string: Comma separated eg: `chrome_headless_linux,cape_win,zenbox_windows` possible values `chrome_headless_linux`, `cape_win` and `zenbox_windows`.
  - `retention_period_days` integer: Optional, number of days the report and URL are kept in VT (between 1 and 28). If not set it defaults to the group's retention policy preference (1 day by default).
  - `storage_region` 'US' | 'CA' | 'EU' | 'GB': Optional, storage region where the URL will be stored. By default uses the group's private_scanning.storage_region preference. Allowed values are US, CA, EU, GB
  - `interaction_sandbox` string: Select the sandbox desired for interactive use, possible values `cape_win`.
  - `interaction_timeout` integer: Interaction timeout in seconds, minimum value: 60. (1 minute.) Max value: 1800: (30 minutes)

## Response `200`

200

- object

## Other responses

- `400`: 400

---

[API](https://skmtc.dev/virustotal/apis/private-scanning.md) - [All operations](https://skmtc.dev/virustotal/apis/private-scanning/llms.txt) - [OpenAPI document](https://skmtc.dev/virustotal/apis/private-scanning/revisions/f6f4e9bf7fa4?raw)