Skip to main content
GET
Get Scan Job Status

Authorizations

apikey
string
header
required

Path Parameters

job_id
string<uuid>
required

Unique scan job UUID

Example:

"123e4567-e89b-12d3-a456-426614174000"

Response

Job status retrieved

Status of a scan job with progress information. Ownership/registry fields (org_id, user_id, project_name, registry_name) are only populated for private jobs; for public jobs they are returned as null. These fields mirror the x-enkrypt-* response headers.

job_id
string
required
source_url
string
required
user_email
string
required
version_or_commit
string | null
required
scan_version
string
required
job_status
string
required
created_at
string
required
started_at
string | null
required
completed_at
string | null
required
error_message
string | null
required
source_version
string | null
total_scan_time
string | null
total_tools_scanned
integer | null
tools_scanned_successfully
integer | null
tools_with_errors
integer | null
total_vulnerabilities
integer | null
overall_severity
string | null
overall_severity_score
number | null
is_official
boolean | null

Whether the scanned server is an official registry entry. Mirrors x-enkrypt-is-official header.

is_private
boolean | null

Whether the scan is private (scoped to the calling account). Mirrors x-enkrypt-is-private header.

scan_type
enum<string> | null

Scan type. Mirrors x-enkrypt-scan-type header.

Available options:
source,
hosted,
null
repo_name
string | null

Repository / server identifier. Mirrors x-enkrypt-repo-name header.

endpoint_url
string | null

Hosted MCP server endpoint URL (hosted scans only). Mirrors x-enkrypt-endpoint-url header.

auth_type
string | null

Authentication type used for the hosted scan (hosted scans only). Mirrors x-enkrypt-auth-type header.

org_id
string<uuid> | null

Organization ID. Only populated when the job is private.

user_id
string<uuid> | null

User ID. Only populated when the job is private.

project_name
string | null

Project name. Only populated when the job is private.

registry_name
string | null

Registry name. Only populated when the job is private.

scanned_tools
object[] | null

Per-tool scan results (present once tool scanning has started)