vulne

Anshin Vulne API

Anshin Vulne API は、診断対象、診断実行、状態取得、結果レポートを外部システムと安全に連携します。

Scope groups

4 件

API items

17 件

Base URL

https://api.vulnediag.anshin.care

API artifact coverage

operations

write APIs

idempotency

100%

high risk

Data classification

confidential: 10
internal: 1
restricted: 1

Scope risk

high: 2
low: 4
medium: 5
none: 1

スコープ別 API

業務スコープを選ぶと、right side contents に API 項目一覧を表示します。

共通仕様

スコープAPI 項目

法人4 API items4 件診断対象6 API items6 件診断実行4 API items4 件結果・レポート3 API items3 件

表示：4 件

POST /integrations/v1/scans

Create 診断実行

公開中

分類: guide
scope: vulne
API group: create_integration_scan_api_integrations_v1_scans_post
endpoint: POST /integrations/v1/scans

POST/integrations/v1/scans

Create Integration Scan

Auth

Integration token

Idempotency-Key

required

Scopes

1 required

operationId

create_integration_scan_api_integrations_v1_scans_post

Lifecycle

stable

Risk

high

Classification

confidential

Resource

scan

Required Scope

required

scans:write

Parameters

name	in	required	schema
Authorization	header	optional	string \| null
Idempotency-Key	header	required	string

Request

status	media type	schema
-	application/json	ScanCreateRequest target_urlstringrequired scan_typestring \| nulloptional auth_profile_idinteger \| nulloptional secondary_auth_profile_idinteger \| nulloptional target_namestring \| nulloptional environmentstringoptional business_criticalitystringoptional target_surfacestring \| nulloptional feature_profilesarray \| nulloptional auth_contextstring \| nulloptional execution_profilestring \| nulloptional selected_major_categoriesarray \| nulloptional scope_modestringoptional allowed_pathsstringoptional excluded_pathsstringoptional web_input_modestringoptional api_http_methodstringoptional api_auth_typestringoptional api_schema_urlstring \| nulloptional api_schema_inline_jsonstring \| nulloptional api_headersstringoptional api_request_bodystringoptional api_endpoint_planstringoptional sca_package_managerstringoptional sca_include_dev_dependenciesbooleanoptional sca_license_policystringoptional sca_sbom_formatstringoptional sca_input_modestringoptional sca_import_filenamestring \| nulloptional sca_import_contentstring \| nulloptional contains_personal_databooleanoptional allow_form_submissionbooleanoptional confirmed_authorizationbooleanoptional scan_plan_confirmed_keysarrayoptional click_flow_catalogClickFlowCatalogInput \| nulloptional example { "target_url": "https://example.com", "scan_type": "string", "auth_profile_id": 123, "secondary_auth_profile_id": 123, "target_name": "サンプル", "environment": "production", "business_criticality": "low", "target_surface": "public_web", "feature_profiles": [ "static_page" ], "auth_context": "unauthenticated", "execution_profile": "passive", "selected_major_categories": [ "connectivity" ], "scope_mode": "single_url", "allowed_paths": "string", "excluded_paths": "string", "web_input_mode": "url", "api_http_method": "GET", "api_auth_type": "none", "api_schema_url": "https://example.com", "api_schema_inline_json": "string", "api_headers": "string", "api_request_body": "string", "api_endpoint_plan": "string", "sca_package_manager": "auto" }

Response

status	media type	schema
202	application/json	ScanJobResponse idintegerrequired auth_profile_idinteger \| nullrequired secondary_auth_profile_idinteger \| nullrequired target_urlstringrequired target_namestring \| nullrequired environmentstringrequired business_criticalitystringrequired target_surfacestringrequired feature_profilesarrayrequired auth_contextstringrequired execution_profilestringrequired selected_major_categoriesarrayoptional scope_modestringrequired allowed_pathsstringrequired excluded_pathsstringrequired web_input_modestringoptional api_http_methodstringrequired api_effective_http_methodstringrequired api_auth_typestringrequired api_schema_urlstring \| nullrequired api_headersstringrequired api_request_bodystringrequired api_endpoint_planstringoptional sca_package_managerstringoptional sca_include_dev_dependenciesbooleanoptional sca_license_policystringoptional sca_sbom_formatstringoptional sca_input_modestringoptional sca_import_filenamestring \| nulloptional contains_personal_databooleanrequired allow_form_submissionbooleanrequired confirmed_authorizationbooleanrequired scan_profilestringrequired request_budgetintegerrequired max_depthintegerrequired statusstringrequired risk_scoreintegerrequired summarystringrequired error_messagestring \| nullrequired failure_categorystring \| nullrequired created_atstringrequired updated_atstringrequired started_atstring \| nullrequired finished_atstring \| nullrequired scan_planScanPlanResponse \| nulloptional findingsarrayoptional

Operation Contract

write operation	yes
bulk mode	-
bulk max items	-
bulk dry run	-
sync type	-
sync max limit	-
reconciliation	-

cURL

curl -X POST "https://api.vulnediag.anshin.care/api/integrations/v1/scans" \
  -H "Authorization: Bearer $ANSHIN_VULNEDIAG_INTEGRATION_ACCESS_TOKEN" \
  -H "Idempotency-Key: $IDEMPOTENCY_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "target_url": "https://example.com",
  "scan_type": "string",
  "auth_profile_id": 123,
  "secondary_auth_profile_id": 123,
  "target_name": "サンプル",
  "environment": "production",
  "business_criticality": "low",
  "target_surface": "public_web",
  "feature_profiles": [
    "static_page"
  ],
  "auth_context": "unauthenticated",
  "execution_profile": "passive",
  "selected_major_categories": [
    "connectivity"
  ],
  "scope_mode": "single_url",
  "allowed_paths": "string",
  "excluded_paths": "string",
  "web_input_mode": "url",
  "api_http_method": "GET",
  "api_auth_type": "none",
  "api_schema_url": "https://example.com",
  "api_schema_inline_json": "string",
  "api_headers": "string",
  "api_request_body": "string",
  "api_endpoint_plan": "string",
  "sca_package_manager": "auto"
}'

Endpoint

field	value
method	POST
path	/api/integrations/v1/scans
operationId	create_integration_scan_api_integrations_v1_scans_post
auth	server to server integration client token
Idempotency-Key	required
lifecycle	stable
resource type	scan
data classification	confidential
scope risk	high
write operation	yes

Summary

Create Integration Scan

Required scope

scope	requirement
scans:write	required

Operation contract

field	value
bulk mode	-
bulk max items	-
bulk dry run	-
sync type	-
sync max limit	-
reconciliation	-

Path parameters

name	required	schema
-	-	-
-	-	-

Query parameters

name	required	schema
-	-	-
-	-	-

Header parameters

name	required	schema
Authorization	optional	string \| null
Idempotency-Key	required	string

Request body

status	media type	schema
-	application/json	ScanCreateRequest

Response

status	media type	schema
202	application/json	ScanJobResponse

Example

curl -X POST "https://api.vulnediag.anshin.care/api/integrations/v1/scans" \
  -H "Authorization: Bearer $ANSHIN_VULNEDIAG_INTEGRATION_ACCESS_TOKEN" \
  -H "Idempotency-Key: $IDEMPOTENCY_KEY" \
  -H "Content-Type: application/json" \
  -d '{"example":"replace with request schema"}'

業務境界

domain: 診断実行
endpoint は各 backend の S2S scoped OpenAPI artifact から同期しています。
company 境界は backend で検証します。
write 系 endpoint は、画面用 API と endpoint を分け、処理本体は service 層で共通化します。