Vulnerability Check Tools

Read-only tools for AI agents to inspect Vulnerability Check scan targets and reports.

list_vulnerability_targets

Returns the list of scan target URLs registered under the project.

Input:

Parameter	Type	Required	Description
projectId	String	-	Project ID (defaults to the token's projectId)
page	Integer	-	Page number (default: 1)
limit	Integer	-	Items per page (10 / 20 / 30, default: 10)

Output: Paginated VulnerabilityTarget[]

Copy{
  "data": [
    {
      "id": "target-uuid",
      "projectId": "project-uuid",
      "url": "https://example.com",
      "description": "Production",
      "createdAt": "2026-07-01T00:00:00.000Z",
      "updatedAt": "2026-07-01T00:00:00.000Z"
    }
  ],
  "meta": { "page": 1, "limit": 10, "total": 1, "totalPages": 1 }
}

Permission: All users

---

list_vulnerability_reports

Returns the list of scan reports for a specific scan target, ordered by most recent first. Includes a per-severity finding count for each report.

Input:

Parameter	Type	Required	Description
targetId	String	✓	Scan target ID
projectId	String	-	Project ID (defaults to the token's projectId)
page	Integer	-	Page number (default: 1)
limit	Integer	-	Items per page (10 / 20 / 30, default: 10)

Output: Paginated VulnerabilityReport[] (without findings)

Copy{
  "data": [
    {
      "id": "report-uuid",
      "targetId": "target-uuid",
      "status": "COMPLETED",
      "severityCounts": { "critical": 0, "high": 2, "medium": 1, "low": 0, "info": 2 },
      "startedAt": "2026-07-01T00:00:00.000Z",
      "completedAt": "2026-07-01T00:00:10.000Z",
      "errorMessage": null,
      "createdAt": "2026-07-01T00:00:00.000Z"
    }
  ],
  "meta": { "page": 1, "limit": 10, "total": 1, "totalPages": 1 }
}

Permission: All users

---

get_vulnerability_report

Returns the full details of a scan report, including all findings and the raw HTTP scan data. Use the language parameter to switch the language of the title/reason/remediation fields in each finding.

Input:

Parameter	Type	Required	Description
targetId	String	✓	Scan target ID
reportId	String	✓	Report ID
projectId	String	-	Project ID (defaults to the token's projectId)
language	String	-	"ja" or "en" (default: "en")

Output: VulnerabilityReport (with findings)

Copy{
  "id": "report-uuid",
  "targetId": "target-uuid",
  "status": "COMPLETED",
  "severityCounts": { "critical": 0, "high": 2, "medium": 1, "low": 0, "info": 1 },
  "startedAt": "2026-07-01T00:00:00.000Z",
  "completedAt": "2026-07-01T00:00:10.000Z",
  "errorMessage": null,
  "createdAt": "2026-07-01T00:00:00.000Z",
  "findings": [
    {
      "id": "finding-uuid",
      "checkId": "HSTS",
      "severity": "HIGH",
      "isDetected": true,
      "title": "HTTP Strict Transport Security (HSTS)",
      "reason": "The Strict-Transport-Security header is missing.",
      "remediation": "Add 'Strict-Transport-Security: max-age=31536000; includeSubDomains' to responses.",
      "rawEvidence": { "headerValue": null }
    }
  ],
  "rawScanData": { "...": "omitted" }
}

Permission: All users