API reference / Scan schedules
List scan schedules
GEThttps://api.fortwatch.ai/app/scan-schedules
Every scan schedule of the workspace with its next run.
Paged: send page and limit (100 by default, at most 500); the total is in X-Total-Count (paging).
Parameters
| Name | In | Type | Description |
|---|---|---|---|
page | query | integer | The page, from 1. |
limit | query | integer | Rows per page: an API key or OAuth token gets 100 when it sends none, at most 500. |
Example request
curl -X GET "https://api.fortwatch.ai/app/scan-schedules?limit=100" \
-H "Authorization: Bearer $FORTWATCH_API_KEY"Response 200
The request succeeded.
| Field | Type | Description |
|---|---|---|
idrequired | number | |
assetIdrequired | number | |
namerequired | string | |
frequencyrequired | string | |
dayOfWeekrequired | number | null | |
dayOfMonthrequired | number | null | |
timerequired | string | |
intervalDaysrequired | number | null | |
windowStartHourrequired | number | null | |
windowEndHourrequired | number | null | |
windowDaysrequired | number[] | |
enabledrequired | boolean | |
lastRunAtrequired | string (date-time) | null | |
nextRunAtrequired | string (date-time) | null | |
createdAtrequired | string (date-time) | |
updatedAtrequired | string (date-time) | |
assetrequired | object | |
idrequired | number | |
projectIdrequired | number | |
namerequired | string | null | |
typerequired | string | |
valuerequired | string | |
statusrequired | string | |
canonicalUrlrequired | string | null | |
resolvedIprequired | string | null | |
cdnProviderrequired | string | null | |
bucketProviderrequired | string | null | |
lastCheckedAtrequired | string (date-time) | null | |
failReasonrequired | string | null | |
skippedRedirectHostrequired | string | null | |
disabledScannerTypesrequired | string[] | |
portScanModerequired | string | |
nucleiMinSeverityrequired | string | |
ownershipVerifiedAtrequired | string (date-time) | null | |
ownershipTokenrequired | string | |
ownershipMethodrequired | string | null | |
createdAtrequired | string (date-time) | |
updatedAtrequired | string (date-time) | |
projectrequired | object | |
idrequired | number | |
namerequired | string |
[
{
"id": 42,
"assetId": 42,
"name": "Production",
"frequency": "string",
"dayOfWeek": 1,
"dayOfMonth": 1,
"time": "string",
"intervalDays": 1,
"windowStartHour": 1,
"windowEndHour": 1,
"windowDays": [
1
],
"enabled": true,
"lastRunAt": "2026-10-16T12:00:00.000Z",
"nextRunAt": "2026-10-16T12:00:00.000Z",
"createdAt": "2026-10-16T12:00:00.000Z",
"updatedAt": "2026-10-16T12:00:00.000Z",
"asset": {
"id": 42,
"projectId": 42,
"name": "Production",
"type": "string",
"value": "app.example.com",
"status": "string",
"canonicalUrl": "string",
"resolvedIp": "string",
"cdnProvider": "string",
"bucketProvider": "string",
"lastCheckedAt": "2026-10-16T12:00:00.000Z",
"failReason": "string",
"skippedRedirectHost": "string",
"disabledScannerTypes": [
null
],
"portScanMode": "string",
"nucleiMinSeverity": "string",
"ownershipVerifiedAt": "2026-10-16T12:00:00.000Z",
"ownershipToken": "string",
"ownershipMethod": "string",
"createdAt": "2026-10-16T12:00:00.000Z",
"updatedAt": "2026-10-16T12:00:00.000Z",
"project": {
"id": null,
"name": null
}
}
}
]Errors
400 | The request is not valid: a field is missing or has the wrong shape (the message names it). |
401 | No valid credentials: the API key or access token is missing, revoked or expired (INVALID_API_KEY, INVALID_TOKEN). |
403 | Not allowed: the key or token lacks this scope (SCOPE_REQUIRED), the route is dashboard-only (SESSION_REQUIRED), or a plan limit applies. |
429 | Too many requests (RATE_LIMITED): wait the seconds Retry-After gives. |
Every code is explained in Errors.