Harness

Harness Scans API

Access and modify Security Test Scans

Documentation GitHub OpenAPI

Operations 10

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /sto/api/v2/scans List security test scans · Scans#List scans #

Ask an LLM

“What security scans have run in my Harness STO account?”

“Can I list only the scans from one pipeline execution?”

Tell an agent

List security test scans in account {account}.

Show scans from pipeline execution {execution} in account {account}.

POST /sto/api/v2/scans Record a new security test scan · Scans#Create scan #

Ask an LLM

“How do I register a new security scan record for a pipeline step?”

“What do I need to supply when creating a scan, such as scanner product and target variant?”

Tell an agent

Create a scan for execution {execution}, product {product}, target variant {target} in account {account}.

Record a new {status} scan for pipeline {pipeline} step {step} in account {account}.

DELETE /sto/api/v2/scans/{id} Delete a security test scan · Scans#Delete scan #

Ask an LLM

“How do I remove a security scan record I no longer need?”

“Can I delete a scan by its ID?”

Tell an agent destructive · confirm first

Delete scan {scan} in account {account}.

Remove security test scan {scan} from account {account}.

GET /sto/api/v2/scans/{id} Get a security test scan by ID · Scans#Find scan by id #

Ask an LLM

“What are the details and status of a particular security scan?”

“Can I look up one scan record by its ID?”

Tell an agent

Get scan {scan} in account {account}.

Show the status and target of security scan {scan} for account {account}.

PUT /sto/api/v2/scans/{id} Update an existing security test scan · Scans#Update scan #

Ask an LLM

“How do I mark a running security scan as succeeded or failed?”

“Can I attach an artifact fingerprint to a scan after it has been created?”

Tell an agent

Update scan {scan} in account {account} to status {status}.

Set artifact fingerprint {fingerprint} on existing scan {scan} (account {account}).

GET /sto/api/v2/scans/{id}/issue/{issueId} Get one issue found by a scan · Scans#Scan issue #

Ask an LLM

“What are the details of one vulnerability a security scan reported?”

“Can I view a single issue within a scan's findings?”

Tell an agent

Get issue {issue} from scan {scan} in account {account}.

Show the details of finding {issue} reported by scan {scan} (account {account}).

GET /sto/api/v2/scans/{id}/issue/{issueId}/occurrences List occurrences of a scan issue · Scans#Scan issue occurrences #

Ask an LLM

“Where in the code or image does a scan issue occur, and how many times?”

“Can I filter an issue's occurrences by exemption status?”

Tell an agent

List occurrences of issue {issue} in scan {scan}, account {account}.

Show {exemption_status} occurrences of issue {issue} in scan {scan} (account {account}).

GET /sto/api/v2/scans/{id}/issues List the issues found by a scan · Scans#Scan issues #

Ask an LLM

“What vulnerabilities did a particular security scan find?”

“Can I include or exclude exempted issues when listing a scan's findings?”

Tell an agent

List issues found by scan {scan} in account {account}.

Show only exempted issues for scan {scan} (account {account}).

GET /sto/api/v2/scans/{id}/issues/counts Count active issues in a scan by severity · Scans#Scan issue counts #

Ask an LLM

“How many active critical and high issues did this scan report?”

“What's the issue count breakdown for a security scan?”

Tell an agent

Get active issue counts for scan {scan} in project {project}, org {org}, account {account}.

Count the open security issues in scan {scan} (account {account}, org {org}, project {project}).

GET /sto/api/v2/scans/latest Get the latest scans for a target variant · Get Latest Scans #

Ask an LLM

“What is the most recent successful scan for each scanner on this target?”

“Can I get the latest scan for one scanner product and subproduct only?”

Tell an agent

Get the latest successful scans for target variant {target} in account {account}.

Show the most recent {product} scan for target variant {target} (account {account}).

Harness Scans API

Operations 10

Documentation

Specifications

Other Resources

Work with this as data

MCP server

Tools for apis

Call it yourself

Get an API key

OpenAPI Specification