---
title: "Get a runtime validation application profile"
method: POST
path: "/api/v2/runtimeValidation/getApplicationProfile"
tags: ["Runtime Validation"]
---

# Get a runtime validation application profile

`POST /api/v2/runtimeValidation/getApplicationProfile`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v2/runtimeValidation/getApplicationProfile`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

Return the runtime validation profile, generated input prompts, redacted value presence, and recent validation runs for one application. Stored runtime input values are encrypted and are never returned by this route.

## Request body

- RuntimeValidationGetApplicationProfileRequest
  - `organizationId` string
  - `profileId` string: Runtime validation profile id. Provide exactly one of profileId or applicationInfoId.
  - `applicationInfoId` string: PersistentSastScanApplicationInfo id. Provide exactly one of profileId or applicationInfoId.

## Response `200`

Runtime validation application profile

- RuntimeValidationApplicationProfileResponse
  - `applicationInfo` object, required
    - `id` string, required
    - `name` string, required
    - `description` string, required
    - `techStack` string[], required
    - `architecture` string, required
    - `directory` string, required
    - `directoryPath` string, required
    - `repositoryId` string, required
  - `profile` object, nullable, required
    - `id` string, required
    - `status` 'NOT_ANALYZED' | 'NOT_TESTABLE' | 'NEEDS_INPUT' | 'READY' | 'ERROR', required: Persistent Runtime Validation readiness status for an application profile. READY profiles can be validated against eligible full scans.
    - `targetMode` 'REMOTE_CONNECTIVITY' | 'LOCAL_ARTIFACT' | 'SOURCE_BUILD', required: Runtime target mode for the application profile. LOCAL_ARTIFACT profiles require an uploaded Linux x86_64/amd64 compiled artifact before validation can start. SOURCE_BUILD profiles are built and run from source inside the isolated validation pod, so no deployed target or uploaded artifact is required.
    - `canBeDynamicallyTested` boolean, required
    - `reasoning` string, nullable, required
    - `notTestableReason` string, nullable, required
    - `lastAnalyzedAt` string, date-time, nullable, required
    - `lastAnalyzedCodeScanId` string, nullable, required
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `inputSummary` RuntimeValidationInputSummary, required
      - `required` integer, required
      - `provided` integer, required
      - `missing` integer, required
    - `localArtifact` RuntimeValidationLocalArtifactSummary, required
      - `id` string, required
      - `originalFilename` string, required
      - `contentType` string, nullable, required
      - `byteSize` integer, required
      - `sha256` string, required
      - `uploadedByUserId` string, nullable, required
      - `uploadedAt` string, date-time, required
      - `expiresAt` string, date-time, nullable, required
      - `expired` boolean, required
      - `supportedRuntime` RuntimeValidationSupportedLocalArtifactRuntime, required: Runtime environment used for uploaded local artifacts. Only Linux x86_64/amd64 artifacts are supported.
        - `os` 'linux', required
        - `architecture` 'x86_64', required
        - `container` string, required
    - `supportedLocalArtifactRuntime` RuntimeValidationSupportedLocalArtifactRuntime, required: Runtime environment used for uploaded local artifacts. Only Linux x86_64/amd64 artifacts are supported.
      - `os` 'linux', required
      - `architecture` 'x86_64', required
      - `container` string, required
    - `inputs` RuntimeValidationApplicationInput[], required
      - `id` string, required
      - `key` string, required
      - `title` string, required
      - `description` string, required
      - `sensitive` boolean, required
      - `sortOrder` integer, required
      - `source` 'GENERATED' | 'USER_DEFINED', required: Whether a runtime validation input prompt was generated from application analysis or manually added by a user/MCP client.
      - `value` union, required: Redacted value metadata. The encrypted value is never returned through normal runtime validation profile routes.
        - object
          - `state` 'missing', required
        - object
          - `state` 'present', required
          - `updatedAt` string, date-time, nullable, required
          - `updatedByUserId` string, nullable, required
          - `expiresAt` string, date-time, nullable, required
          - `expired` boolean, required
    - `recentRuns` RuntimeValidationRunSummary[], required
      - `id` string, required
      - `profileId` string, required
      - `codeScanId` string, required
      - `status` 'PENDING' | 'PROCESSING' | 'COMPLETED' | 'FAILED' | 'CANCELLED', required: Queue and lifecycle status for a runtime validation run.
      - `triggerReason` 'USER_REQUESTED' | 'AUTO_AFTER_SCAN', required: Why the validation run was created.
      - `triggeredByUserId` string, nullable, required
      - `startedAt` string, date-time, nullable, required
      - `completedAt` string, date-time, nullable, required
      - `cancelledAt` string, date-time, nullable, required
      - `summary` string, nullable, required
      - `createdAt` string, date-time, required
      - `updatedAt` string, date-time, required

## Other responses

- `400`: Error Response
- `401`: Error Response
- `403`: Error Response
- `404`: Error Response
- `409`: Error Response
- `412`: Error Response

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api/revisions/126e9c80ba0d?raw)