Error
Scans
Trigger a scan on an existing Container
POST
Error
Authorizations
Scoped API token from Settings → API Tokens (scopes: scans:trigger, scans:read).
Headers
Cloudflare Access service-token client id (ends in .access). Only for CF-Access-fronted deployments; leave blank for self-hosted.
Cloudflare Access service-token secret. Pair it with CF-Access-Client-Id.
Path Parameters
BreachLens Container ID.
Body
application/json
Optional body. Omit to run the server default scan set for the target.
Scan tiers to run. Omit for the server default (SAST, SCA, SECRET, IAC for repositories). Valid values depend on target type.
Example: