Automattic

Automattic Scan API

The scan API from Automattic — 5 operation(s) for scan.

GitHub OpenAPI

Operations 5

GET /wpcom/v2/sites/{wpcom_site}/scan GET /wpcom/v2/sites/{wpcom_site}/scan #
GET /wpcom/v2/sites/{wpcom_site}/scan/counts GET /wpcom/v2/sites/{wpcom_site}/scan/counts #
POST /wpcom/v2/sites/{wpcom_site}/scan/enqueue POST /wpcom/v2/sites/{wpcom_site}/scan/enqueue #
GET /wpcom/v2/sites/{wpcom_site}/scan/history GET /wpcom/v2/sites/{wpcom_site}/scan/history #
GET /wpcom/v2/sites/{wpcom_site}/scan/threat/{threatId} GET /wpcom/v2/sites/{wpcom_site}/scan/threat/{threatId} #

Documentation

📖
Documentation
https://developer.wordpress.com/docs/api/
📖
APIReference
https://developer.wordpress.com/docs/api/rest-api-reference/
📖
GettingStarted
https://developer.wordpress.com/docs/api/getting-started/
📖
Documentation
https://akismet.com/development/api/

Specifications

⚙
OpenAPI
https://artifacts.apis.io/automattic/openapi/automattic-scan-api-openapi.yml

Other Resources

🔗
Console
https://developer.wordpress.com/docs/api/console/
🔗
SourceCode
https://github.com/Automattic/akismet-api
🔗
PluginManifest
https://artifacts.apis.io/automattic/well-known/automattic-ai-plugin.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/automattic:automattic-scan-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

automattic-scan-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: WordPress.com REST API — wpcom/v2 namespace Scan API
  version: v2
  description: Derived by API Evangelist from the WordPress.com REST API route index published at https://public-api.wordpress.com/wpcom/v2/. Paths, HTTP methods, and parameter names/types/descriptions/defaults are taken verbatim from that index. Response schemas are not published in the route index, so successful responses are described but not schematised; the error envelope was observed live on public-api.wordpress.com.
  contact:
    name: Automattic
    url: https://developer.wordpress.com/docs/api/
  x-derived-from: https://public-api.wordpress.com/wpcom/v2/
  x-derived-by: API Evangelist enrichment pipeline
servers:
- url: https://public-api.wordpress.com
security:
- bearerAuth: []
tags:
- name: Scan
paths:
  /wpcom/v2/sites/{wpcom_site}/scan:
    get:
      operationId: getWpcomV2SitesbyWpcomSiteScan
      summary: GET /wpcom/v2/sites/{wpcom_site}/scan
      tags:
      - Scan
      responses:
        '200':
          description: OK
        '401':
          description: Authentication required
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WPRestError'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WPRestError'
      parameters:
      - name: wpcom_site
        in: path
        required: true
        schema:
          type: string
  /wpcom/v2/sites/{wpcom_site}/scan/counts:
    get:
      operationId: getWpcomV2SitesbyWpcomSiteScanCounts
      summary: GET /wpcom/v2/sites/{wpcom_site}/scan/counts
      tags:
      - Scan
      responses:
        '200':
          description: OK
        '401':
          description: Authentication required
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WPRestError'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WPRestError'
      parameters:
      - name: wpcom_site
        in: path
        required: true
        schema:
          type: string
  /wpcom/v2/sites/{wpcom_site}/scan/enqueue:
    post:
      operationId: postWpcomV2SitesbyWpcomSiteScanEnqueue
      summary: POST /wpcom/v2/sites/{wpcom_site}/scan/enqueue
      tags:
      - Scan
      responses:
        '200':
          description: OK
        '401':
          description: Authentication required
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WPRestError'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WPRestError'
      parameters:
      - name: wpcom_site
        in: path
        required: true
        schema:
          type: string
  /wpcom/v2/sites/{wpcom_site}/scan/history:
    get:
      operationId: getWpcomV2SitesbyWpcomSiteScanHistory
      summary: GET /wpcom/v2/sites/{wpcom_site}/scan/history
      tags:
      - Scan
      responses:
        '200':
          description: OK
        '401':
          description: Authentication required
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WPRestError'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WPRestError'
      parameters:
      - name: wpcom_site
        in: path
        required: true
        schema:
          type: string
      - name: filter
        in: query
        required: false
        schema:
          type: string
          default:
          - ignored
          - fixed
  /wpcom/v2/sites/{wpcom_site}/scan/threat/{threatId}:
    get:
      operationId: getWpcomV2SitesbyWpcomSiteScanThreatbyThreatid
      summary: GET /wpcom/v2/sites/{wpcom_site}/scan/threat/{threatId}
      tags:
      - Scan
      responses:
        '200':
          description: OK
        '401':
          description: Authentication required
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WPRestError'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WPRestError'
      parameters:
      - name: wpcom_site
        in: path
        required: true
        schema:
          type: string
      - name: threatId
        in: path
        required: true
        schema:
          type: string
components:
  schemas:
    WPRestError:
      type: object
      description: WordPress REST API error envelope (observed on public-api.wordpress.com).
      properties:
        code:
          type: string
          example: rest_unauthorized
        message:
          type: string
          example: Authentication required.
        data:
          type: object
          properties:
            status:
              type: integer
              example: 401
  securitySchemes:
    oauth2:
      type: oauth2
      description: WordPress.com OAuth 2.1, per https://public-api.wordpress.com/.well-known/openid-configuration
      flows:
        authorizationCode:
          authorizationUrl: https://public-api.wordpress.com/oauth2-1/authorize
          tokenUrl: https://public-api.wordpress.com/oauth2-1/token
          refreshUrl: https://public-api.wordpress.com/oauth2-1/token
          scopes:
            global: ''
            auth: ''
            openid: ''
            profile: ''
            email: ''
            users: ''
            sites: ''
            posts: ''
            comments: ''
            taxonomy: ''
            follow: ''
            sharing: ''
            freshly-pressed: ''
            notifications: ''
            insights: ''
            read: ''
            stats: ''
            media: ''
            menus: ''
            batch: ''
            videos: ''
    bearerAuth:
      type: http
      scheme: bearer