Fortify

Fortify Scan Schedules API

Manage scheduled scans

GitHub OpenAPI

Operations 5

GET /scan-schedules Fortify List scan schedules #
POST /scan-schedules Fortify Create scan schedule #
GET /scan-schedules/{scanScheduleId} Fortify Get scan schedule #
PUT /scan-schedules/{scanScheduleId} Fortify Update scan schedule #
DELETE /scan-schedules/{scanScheduleId} Fortify Delete scan schedule #

Documentation

📖
Documentation
https://www.microfocus.com/documentation/fortify-on-demand/
📖
APIReference
https://api.ams.fortify.com/swagger/ui/index
📖
Authentication
https://api.ams.fortify.com/oauth/token
📖
GettingStarted
https://www.microfocus.com/documentation/fortify-on-demand/251/Fortify_on_Demand_Guide_25.1_EN.pdf
📖
Documentation
https://www.microfocus.com/documentation/fortify-software-security-center/2520/
📖
APIReference
https://your-ssc-server/ssc/html/docs/api-reference/
📖
Authentication
https://your-ssc-server/ssc/api/v1/auth
📖
GettingStarted
https://www.microfocus.com/documentation/fortify-software-security-center/
📖
Documentation
https://www.microfocus.com/documentation/fortify-ScanCentral-DAST/2520/
📖
GettingStarted
https://www.microfocus.com/documentation/fortify-ScanCentral-DAST/2520/sc-dast-ugd-25.2.0.pdf

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/fortify/refs/heads/main/openapi/fortify-scan-schedules-api-openapi.yml

Other Resources

🔗
SDKs
https://github.com/fortify/ssc-restapi-client

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/fortify-scan-schedules-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

fortify-scan-schedules-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Fortify ScanCentral DAST Scan Schedules API
  description: REST API for Fortify ScanCentral DAST, which provides centralized dynamic application security testing management. Enables orchestration of DAST scans across distributed WebInspect sensors, management of scan settings and policies, sensor pool configuration, and CI/CD pipeline integration. Authentication uses FortifyToken obtained from Fortify Software Security Center.
  version: v2
  contact:
    name: OpenText Fortify Support
    url: https://www.opentext.com/support
    email: fortify-support@microfocus.com
  license:
    name: Proprietary
    url: https://www.opentext.com/about/legal/website-terms-of-use
  x-logo:
    url: https://www.microfocus.com/brand/fortify-logo.png
servers:
- url: '{protocol}://{host}/api'
  description: ScanCentral DAST API Server
  variables:
    protocol:
      default: https
      enum:
      - https
      - http
    host:
      default: localhost:8500
      description: Your ScanCentral DAST server hostname and port
security:
- fortifyToken: []
tags:
- name: Scan Schedules
  description: Manage scheduled scans
paths:
  /scan-schedules:
    get:
      operationId: listScanSchedules
      summary: Fortify List scan schedules
      description: Retrieves a list of scheduled scans.
      tags:
      - Scan Schedules
      parameters:
      - $ref: '#/components/parameters/Offset'
      - $ref: '#/components/parameters/Limit'
      responses:
        '200':
          description: Successful response with list of scan schedules
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ScanScheduleListResponse'
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createScanSchedule
      summary: Fortify Create scan schedule
      description: Creates a new scheduled scan configuration.
      tags:
      - Scan Schedules
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateScanScheduleRequest'
      responses:
        '201':
          description: Scan schedule created successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ScanSchedule'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
  /scan-schedules/{scanScheduleId}:
    get:
      operationId: getScanSchedule
      summary: Fortify Get scan schedule
      description: Retrieves details for a specific scan schedule.
      tags:
      - Scan Schedules
      parameters:
      - name: scanScheduleId
        in: path
        required: true
        description: Unique identifier of the scan schedule
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Successful response with scan schedule details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ScanSchedule'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    put:
      operationId: updateScanSchedule
      summary: Fortify Update scan schedule
      description: Updates an existing scan schedule.
      tags:
      - Scan Schedules
      parameters:
      - name: scanScheduleId
        in: path
        required: true
        description: Unique identifier of the scan schedule
        schema:
          type: string
          format: uuid
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateScanScheduleRequest'
      responses:
        '200':
          description: Scan schedule updated successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ScanSchedule'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    delete:
      operationId: deleteScanSchedule
      summary: Fortify Delete scan schedule
      description: Deletes a scan schedule.
      tags:
      - Scan Schedules
      parameters:
      - name: scanScheduleId
        in: path
        required: true
        description: Unique identifier of the scan schedule
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Scan schedule deleted successfully
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
components:
  parameters:
    Limit:
      name: limit
      in: query
      description: Maximum number of records to return
      schema:
        type: integer
        format: int32
        default: 50
    Offset:
      name: offset
      in: query
      description: Number of records to skip for pagination
      schema:
        type: integer
        format: int32
        default: 0
  schemas:
    ScanSchedule:
      type: object
      description: A scheduled scan configuration
      properties:
        id:
          type: string
          format: uuid
          description: Unique identifier
        name:
          type: string
          description: Schedule name
        scanSettingsId:
          type: string
          format: uuid
          description: Scan settings to use
        scheduleType:
          type: string
          description: Type of schedule
          enum:
          - Once
          - Daily
          - Weekly
          - Monthly
        startDateTime:
          type: string
          format: date-time
          description: Scheduled start date and time
        enabled:
          type: boolean
          description: Whether the schedule is enabled
        timeZone:
          type: string
          description: Time zone for the schedule
    ScanScheduleListResponse:
      type: object
      description: List of scan schedules
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/ScanSchedule'
        totalCount:
          type: integer
          format: int32
    ErrorResponse:
      type: object
      description: Error response
      properties:
        errorCode:
          type: integer
          format: int32
        message:
          type: string
        details:
          type: string
    CreateScanScheduleRequest:
      type: object
      description: Request to create a scan schedule
      required:
      - name
      - scanSettingsId
      - scheduleType
      - startDateTime
      properties:
        name:
          type: string
          description: Schedule name
        scanSettingsId:
          type: string
          format: uuid
          description: Scan settings to use
        scheduleType:
          type: string
          enum:
          - Once
          - Daily
          - Weekly
          - Monthly
        startDateTime:
          type: string
          format: date-time
        enabled:
          type: boolean
          default: true
        timeZone:
          type: string
    UpdateScanScheduleRequest:
      type: object
      description: Request to update a scan schedule
      properties:
        name:
          type: string
        scanSettingsId:
          type: string
          format: uuid
        scheduleType:
          type: string
          enum:
          - Once
          - Daily
          - Weekly
          - Monthly
        startDateTime:
          type: string
          format: date-time
        enabled:
          type: boolean
        timeZone:
          type: string
  responses:
    Unauthorized:
      description: Unauthorized - authentication required or token invalid
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    NotFound:
      description: Not found - the specified resource does not exist
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    BadRequest:
      description: Bad request - invalid parameters or request body
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
  securitySchemes:
    fortifyToken:
      type: apiKey
      in: header
      name: Authorization
      description: 'Fortify token-based authentication. Pass as: FORTIFYTOKEN <token_value>. Obtain a CI token from SSC Administration or use an SSC auth token.'
externalDocs:
  description: Fortify ScanCentral DAST Documentation
  url: https://www.microfocus.com/documentation/fortify-ScanCentral-DAST/