---
title: "Scan"
method: POST
path: "/api/v1/scan"
tags: ["Scanning"]
---

# Scan

`POST /api/v1/scan`

Submit a URL to be scanned and control options for how the scan should be performed.

## Request body

- object
  - `url` string, uri, required — The URL to be scanned
  - `visibility` 'public' | 'unlisted' | 'private' — Intended visibility of the final scan result
  - `country` string — Country to scan from. ISO 3166-1 alpha-2 format. If not supplied, an appropriate country will automatically be chosen.
  - `tags` string[] — User-defined tags to annotate this scan, e.g. "phishing" or "malicious".
  - `overrideSafety` string — If set to any value, this will disable reclassification of URLs with potential PII in them. Use with care!
  - `referer` string — Override HTTP referer for this scan
  - `customagent` string — Override HTTP User-Agent for this scan

## Response `200`

OK

- object
  - `uuid` string, uuid — UUID for scan result, also called $scanId
  - `country` string — Country for scanning
  - `visibility` string — Determined visibility for scan
  - `url` string, uri — Determined URL being scanned

---

[API](https://skmtc.net/urlscan/apis/urlscan-io-apis.md) · [All operations](https://skmtc.net/urlscan/apis/urlscan-io-apis/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/urlscan/urlscan-io-apis/revisions/5d97b31afd68/schema)