---
title: "Get Scan Report"
method: GET
path: "/api/scanner/{id}/report/"
tags: ["Scanner"]
---

# Get Scan Report

`GET /api/scanner/{id}/report/`

Retrieve the JSON report generated for a private scan using its `id`.

## Path parameters

- `id` integer, required — Unique identifier for the scan.

## Response `200`

__Scan Report__

- ScanReport — Scan report object. Nested `responses` and `cve` structures are intentionally flexible and may vary by protocol or enrichment stage.
  - `id` integer, required — Report identifier.
  - `name` string, required — Report name.
  - `created_at` string, date-time, required — Timestamp when the report was generated.
  - `scan_id` integer, required — Unique identifier for the scan.
  - `scope` string[], required — Original scope values used for the scan.
  - `saved_graph` object, nullable, required — Saved attack surface graph metadata associated with the scan report, if any.
  - `mode` string, required — Scan execution mode.
  - `agent` ScannerAgent, required — Scanner agent that can initiate private scans from a specific geolocation.
    - `id` integer, required — Identifier of the scanner agent to use for the scan.
    - `description` string — Human-readable description of the scanner agent.
    - `name` string, required — Agent name.
    - `label` string, required — Agent label.
    - `location` string, required — Agent geolocation as an ISO 3166-1 alpha-2 country code.
    - `ip_address` Ipv4[], required — Public IP addresses used by the scanner agent.
    - `is_default` boolean — Indicates whether this agent is the default scanner agent for the user.
    - `queue_eta` integer — Estimated queue waiting time for this agent, in seconds.
  - `responses` object[] — Collected endpoint records. Item structure is dynamic.
  - `cve` object — Vulnerability matches aggregated from scan results. Structure is dynamic.

## Other responses

- `400` — __Bad Request__: Some required parameters were not passed or were not validated
- `401` — __Unauthorized__: The request was rejected due to missing or invalid authentication credentials
- `403` — __Access Denied__: You are not allowed to perform this action Error details are included in the response body.
- `404` — __Not Found__: The scan with the requested ID was not found
- `500` — __Internal Server Error__: Details are included in the response body

---

[API](https://skmtc.net/netlas/apis/netlas-api.md) · [All operations](https://skmtc.net/netlas/apis/netlas-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/netlas/netlas-api/revisions/2b1f84425791/schema)