Start Scan

POST

Query

Field selectionChoose which fields should be included in the response. Learn more

string

Comma-separated response fields to include.

Body

Arguments

array of string

Optional target addresses to scan. Leave empty to scan all targets.

array of string

Optional target tag names to scan.

boolean

Throttle the scan for reduced scan intensity.

boolean

Limit the scan to common web ports only.

Try this request

Request

curl --request POST \
  --url "https://connect.mindcloud.co/v1/universal/intruder/latest/actions/start-scan" \
  --header "Authorization: Bearer $MINDCLOUD_API_TOKEN" \
  --header "Content-Type: application/json" \
  --data '{
  "connectionId": "$CONNECTION_ID"
}'

{
  "success": true,
  "data": [
    {
      "completedTime": "2026-05-07T12:00:00.000Z",
      "createdAt": "2026-05-07T12:00:00.000Z",
      "id": 1,
      "scanType": "string",
      "schedulePeriod": "string",
      "startTime": "2026-05-07T12:00:00.000Z",
      "status": "string",
      "targetAddresses": [
        "string"
      ],
      "throttled": true,
      "webPortsOnly": true
    }
  ],
  "meta": {}
}

Every app you connect,one REST pattern

Call any app with one REST pattern. MindCloud handles each provider's auth, request shape, and responses for you.

Learn what the Universal API is

One REST patternUse the same request structure across apps like Slack, HubSpot, Salesforce, and thousands more.

Managed connectionsSend a MindCloud connection ID instead of handling provider tokens, refresh logic, and credential storage yourself.

Action-level docsEach action page shows the exact endpoint, required arguments, optional controls, and response behavior for that app version.