API Reference
Tasks
Task submission and management endpoints.
Tasks
Submit tasks
POST /api/v1/runs/:runId/tasksSubmit one or more tasks to a run session.
Request body
{
"tasks": [{
"externalId": "finding-001",
"title": "SQL injection in login form",
"severity": "critical",
"description": "The login form is vulnerable to SQL injection via the username field.",
"evidence": [{
"type": "code",
"label": "Vulnerable query",
"content": "SELECT * FROM users WHERE username = '" + input + "'"
}],
"remediation": [{
"step": 1,
"instruction": "Use parameterized queries instead of string concatenation."
}],
"successCriteria": [{
"description": "Login form uses parameterized queries",
"automatable": true
}]
}]
}Response
{
"created": 1,
"tasks": [{ "id": "task_abc123", "status": "open" }]
}List tasks
GET /api/v1/tasksQuery parameters
| Parameter | Type | Description |
|---|---|---|
status | string | Filter by status |
severity | string | Filter by severity |
runId | string | Filter by run session |
page | number | Page number (default: 1) |
limit | number | Items per page (default: 50, max: 200) |
Get task
GET /api/v1/tasks/:idReturns full task details including evidence, remediation steps, and success criteria.
Update task
PATCH /api/v1/tasks/:id{
"status": "in_progress"
}