FortWatchFortWatchDocs
Menu

List scan schedules

GEThttps://api.fortwatch.ai/app/scan-schedules
Scope scans:readPagedOperation ID listScanSchedules

Every scan schedule of the workspace with its next run.

Paged: send page and limit (100 by default, at most 500); the total is in X-Total-Count (paging).

Parameters

NameInTypeDescription
pagequeryintegerThe page, from 1.
limitqueryintegerRows per page: an API key or OAuth token gets 100 when it sends none, at most 500.

Example request

curl -X GET "https://api.fortwatch.ai/app/scan-schedules?limit=100" \
  -H "Authorization: Bearer $FORTWATCH_API_KEY"

Response 200

The request succeeded.

FieldTypeDescription
idrequirednumber
assetIdrequirednumber
namerequiredstring
frequencyrequiredstring
dayOfWeekrequirednumber | null
dayOfMonthrequirednumber | null
timerequiredstring
intervalDaysrequirednumber | null
windowStartHourrequirednumber | null
windowEndHourrequirednumber | null
windowDaysrequirednumber[]
enabledrequiredboolean
lastRunAtrequiredstring (date-time) | null
nextRunAtrequiredstring (date-time) | null
createdAtrequiredstring (date-time)
updatedAtrequiredstring (date-time)
assetrequiredobject
idrequirednumber
projectIdrequirednumber
namerequiredstring | null
typerequiredstring
valuerequiredstring
statusrequiredstring
canonicalUrlrequiredstring | null
resolvedIprequiredstring | null
cdnProviderrequiredstring | null
bucketProviderrequiredstring | null
lastCheckedAtrequiredstring (date-time) | null
failReasonrequiredstring | null
skippedRedirectHostrequiredstring | null
disabledScannerTypesrequiredstring[]
portScanModerequiredstring
nucleiMinSeverityrequiredstring
ownershipVerifiedAtrequiredstring (date-time) | null
ownershipTokenrequiredstring
ownershipMethodrequiredstring | null
createdAtrequiredstring (date-time)
updatedAtrequiredstring (date-time)
projectrequiredobject
idrequirednumber
namerequiredstring
json
[
  {
    "id": 42,
    "assetId": 42,
    "name": "Production",
    "frequency": "string",
    "dayOfWeek": 1,
    "dayOfMonth": 1,
    "time": "string",
    "intervalDays": 1,
    "windowStartHour": 1,
    "windowEndHour": 1,
    "windowDays": [
      1
    ],
    "enabled": true,
    "lastRunAt": "2026-10-16T12:00:00.000Z",
    "nextRunAt": "2026-10-16T12:00:00.000Z",
    "createdAt": "2026-10-16T12:00:00.000Z",
    "updatedAt": "2026-10-16T12:00:00.000Z",
    "asset": {
      "id": 42,
      "projectId": 42,
      "name": "Production",
      "type": "string",
      "value": "app.example.com",
      "status": "string",
      "canonicalUrl": "string",
      "resolvedIp": "string",
      "cdnProvider": "string",
      "bucketProvider": "string",
      "lastCheckedAt": "2026-10-16T12:00:00.000Z",
      "failReason": "string",
      "skippedRedirectHost": "string",
      "disabledScannerTypes": [
        null
      ],
      "portScanMode": "string",
      "nucleiMinSeverity": "string",
      "ownershipVerifiedAt": "2026-10-16T12:00:00.000Z",
      "ownershipToken": "string",
      "ownershipMethod": "string",
      "createdAt": "2026-10-16T12:00:00.000Z",
      "updatedAt": "2026-10-16T12:00:00.000Z",
      "project": {
        "id": null,
        "name": null
      }
    }
  }
]

Errors

400The request is not valid: a field is missing or has the wrong shape (the message names it).
401No valid credentials: the API key or access token is missing, revoked or expired (INVALID_API_KEY, INVALID_TOKEN).
403Not allowed: the key or token lacks this scope (SCOPE_REQUIRED), the route is dashboard-only (SESSION_REQUIRED), or a plan limit applies.
429Too many requests (RATE_LIMITED): wait the seconds Retry-After gives.