Get a scan report

Returns the stored report in the view you ask for: summary (default) carries compact identity, the anchored scan, completion, metric results, the findings summary, and the included-source references; evidence adds the normalized observations and the exact input/settings pairs; full returns the complete report (identity, scan, requested_inputs, scan_settings, completion, observations, metrics, findings, site_audit, integration_context, comparisons). Views never hide which resources belong to the report.

GET/scan-reports/{report_id}

Authorization

AuthorizationBearer token · headerrequired

API key sent as Authorization: Bearer <key>. A key belongs to one workspace, has scopes, and can be limited to some brands.

AuthorizationOAuth2 access token · headerrequired

OAuth 2.1 sign-in (authorization code with PKCE) used by AI assistants that connect through the Zaraftis MCP server. Discovery URLs are at https://api.zaraftis.com/api/auth.

Path parameters

report_idstring<uuid>required

Query parameters

detailstring

summary (default); evidence adds the observations, citations, and excerpts with their offsets; full returns the complete report.

Allowed:summaryevidencefull

Responses

200

The stored report in the requested view

ReportDetailEnvelope

404

not_found: unknown id, or an id this key cannot see

successbooleanrequired

errorobjectrequired

Show properties

codestringrequired

messagestringrequired

retryablebooleanrequired

detailsobject

field_errorsobject[]

Show properties

Array of object

fieldstringrequired

codestringrequired

Allowed:requiredformattoo_smalltoo_largeunrecognized_keyinvalid

messagestringrequired

request_idRequestIdrequired

Request

curl -X GET 'https://api.zaraftis.com/v1/scan-reports/497f6eca-6276-4993-bfeb-53cbbbba6f08' \
  -H 'Authorization: Bearer YOUR_TOKEN' \
  -H 'Accept: application/json'

const response = await fetch("https://api.zaraftis.com/v1/scan-reports/497f6eca-6276-4993-bfeb-53cbbbba6f08", {
  method: "GET",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN",
    "Accept": "application/json"
  }
});

import requests

response = requests.get(
    "https://api.zaraftis.com/v1/scan-reports/497f6eca-6276-4993-bfeb-53cbbbba6f08",
    headers={
        "Authorization": "Bearer YOUR_TOKEN",
        "Accept": "application/json"
    },
)

Response

The stored report in the requested view

{
  "success": false,
  "error": {
    "code": "string",
    "message": "string",
    "retryable": true,
    "details": {},
    "field_errors": [
      {
        "field": "string",
        "code": "required",
        "message": "string"
      }
    ]
  },
  "request_id": "string"
}