List Scans

curl --request GET \
  --url https://api.enkryptai.com/mcp-hub/scans \
  --header 'apikey: <api-key>'

const options = {method: 'GET', headers: {apikey: '<api-key>'}};

fetch('https://api.enkryptai.com/mcp-hub/scans', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.enkryptai.com/mcp-hub/scans",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "apikey: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.enkryptai.com/mcp-hub/scans"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("apikey", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.enkryptai.com/mcp-hub/scans")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["apikey"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "items": [
    {
      "job_id": "<string>",
      "job_status": "<string>",
      "user_email": "<string>",
      "created_at": "<string>",
      "scan_type": "source",
      "repo_name": "<string>",
      "is_official": true,
      "is_private": true,
      "org_id": "<string>",
      "user_id": "<string>",
      "project_name": "<string>",
      "registry_name": "<string>",
      "source_url": "<string>",
      "source_version": "<string>",
      "scan_version": "<string>",
      "completed_at": "<string>",
      "total_vulnerabilities": 123,
      "overall_severity": "<string>"
    }
  ],
  "limit": 123,
  "next_cursor": "eyJjcmVhdGVkX2F0IjoiMjAyNi0wNi0yNVQxMTozMjoxMS4xMjM0NTYrMDA6MDAiLCJqb2JfaWQiOiJhYmMtMTIzIn0",
  "total": 123
}

🔒 MCP Hub API

List Scans

List scan jobs (source and hosted) ordered by (created_at DESC, job_id DESC) with opaque cursor pagination. Supports filtering by visibility, status, scan type, repository name, source_url, source_version, and vulnerability count. Use latest_only=true to collapse repeated scans of the same (source_url, source_version) to the newest row per combo.

Pagination

GET /mcp-hub/scans?limit=20                       # first page
GET /mcp-hub/scans?limit=20&cursor=<next_cursor>  # subsequent pages

The response includes next_cursor (an opaque base64url string). Pass it back verbatim as the cursor query parameter to fetch the next page. When next_cursor is null you have reached the end of the result set. The cursor is treated as opaque; do not decode or construct it manually.

By default total is not returned. Pass ?include_total=true to opt in — it costs a separate COUNT(*) round-trip per request and is intended only for UIs that need a “Showing X of N” counter.

Enterprise data-license feature: requires MCP Hub API access enabled for your organization, otherwise returns 403. Contact support@enkryptai.com.

GET

mcp-hub

scans

List Scans

curl --request GET \
  --url https://api.enkryptai.com/mcp-hub/scans \
  --header 'apikey: <api-key>'

const options = {method: 'GET', headers: {apikey: '<api-key>'}};

fetch('https://api.enkryptai.com/mcp-hub/scans', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.enkryptai.com/mcp-hub/scans",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "apikey: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.enkryptai.com/mcp-hub/scans"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("apikey", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.enkryptai.com/mcp-hub/scans")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["apikey"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "items": [
    {
      "job_id": "<string>",
      "job_status": "<string>",
      "user_email": "<string>",
      "created_at": "<string>",
      "scan_type": "source",
      "repo_name": "<string>",
      "is_official": true,
      "is_private": true,
      "org_id": "<string>",
      "user_id": "<string>",
      "project_name": "<string>",
      "registry_name": "<string>",
      "source_url": "<string>",
      "source_version": "<string>",
      "scan_version": "<string>",
      "completed_at": "<string>",
      "total_vulnerabilities": 123,
      "overall_severity": "<string>"
    }
  ],
  "limit": 123,
  "next_cursor": "eyJjcmVhdGVkX2F0IjoiMjAyNi0wNi0yNVQxMTozMjoxMS4xMjM0NTYrMDA6MDAiLCJqb2JfaWQiOiJhYmMtMTIzIn0",
  "total": 123
}

Authorizations

apikey

string

header

required

Query Parameters

limit

integer

default:50

Page size (max 200).

Required range: 1 <= x <= 200

Example:

50

cursor

string

Opaque pagination cursor returned by the previous response as next_cursor. Omit on the first page. Treat as opaque — do not decode or construct manually.

Maximum string length: 4096

Example:

"eyJjcmVhdGVkX2F0IjoiMjAyNi0wNi0yNVQxMTozMjoxMS4xMjM0NTYrMDA6MDAiLCJqb2JfaWQiOiJhYmMtMTIzIn0"

include_total

boolean

default:false

When true, the response includes a total count of rows matching the filters. Costs an extra COUNT(*) round-trip per page request; omit by default for cursor pagination's constant-time-per-page property.

is_official

boolean

Filter to only official scans (true) or only non-official (false). Omit for both.

is_private

boolean

Filter to only private scans (true) or only public (false). Omit for both.

job_status

enum<string>

Filter by job status

Available options:

initializing,

downloading,

discovering_tools,

scanning_tools,

completed,

failed,

connecting,

discovering,

analyzing

repo_name

string

Case-insensitive substring match on repo / server name

Maximum string length: 500

scan_type

enum<string>

source or hosted

Available options:

source,

hosted

job_id

string<uuid>

Exact job UUID match

source_url

string

Exact match on source_url.

Maximum string length: 2000

source_version

string

Exact match on source_version (npm version or git commit).

Maximum string length: 200

latest_only

boolean

default:false

When true, applies all other filters first, then dedupes results by (source_url, source_version), keeping the newest row per group by created_at. Pagination applies to the deduped list and total reflects the deduped count. Intended for scan_type=source. Returns 400 if the filters would require dedupe over more than 5000 matching rows.

total_vulnerabilities

integer

Exact match on the scan's vulnerability count.

Required range: x >= 0

min_total_vulnerabilities

integer

Inclusive lower bound on the vulnerability count (total_vulnerabilities >= N).

Required range: x >= 0

max_total_vulnerabilities

integer

Inclusive upper bound on the vulnerability count (total_vulnerabilities <= N). A "fewer than 7 vulnerabilities" filter is max_total_vulnerabilities=6.

Required range: x >= 0

Response

Paginated list of scans

Cursor-paginated list of scans. Page by passing the previous response's next_cursor back as the cursor query parameter. When next_cursor is null you have reached the end of the result set.

items

MCPHubScanListItem · object[]

required

Show child attributes

limit

integer

required

The page size used for this response.

next_cursor

string | null

Opaque cursor for the next page, or null on the last page. Pass back verbatim as ?cursor=... — treat as opaque.

Example:

"eyJjcmVhdGVkX2F0IjoiMjAyNi0wNi0yNVQxMTozMjoxMS4xMjM0NTYrMDA6MDAiLCJqb2JfaWQiOiJhYmMtMTIzIn0"

total

integer | null

Total rows matching the filters. Only populated when the request set ?include_total=true; omitted by default because counting arbitrary filtered subsets defeats the point of cursor pagination.