---
title: "Launch a hackbrowser crawl"
method: POST
path: "/session/{sessionID}/hackbrowser/launch"
---

# Launch a hackbrowser crawl

`POST /session/{sessionID}/hackbrowser/launch`

Start a hackbrowser crawl for a session from an interactive entry point (TUI slash, CLI subcommand). Same backend as the LLM-callable hackbrowser tool — agent invocation, slash, and CLI all share this surface. Returns a KickOffResult; captures stream into the session asynchronously.

## Path parameters

- `sessionID` string, required

## Query parameters

- `directory` string

## Request body

- object
  - `target` string, uri, required
  - `credentials` string[]
  - `scope` string[]
  - `exclude` string[]
  - `steps` integer
  - `headless` boolean

## Response `200`

Crawl successfully kicked off; returns sessionID + started flag + status message

- object
  - `sessionID` string, required
  - `started` boolean, required
  - `message` string, required

## Other responses

- `400` — Bad request
- `404` — Not found

---

[API](https://skmtc.net/cyberstrikeus/apis/cyberstrike.md) · [All operations](https://skmtc.net/cyberstrikeus/apis/cyberstrike/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cyberstrikeus/cyberstrike/versions/4e11f1aed2fd/schema)