Skip to main content
POST
Scan Tool Endpoint

Headers

X-Blindsight-App-Id
string | null
X-Blindsight-App-Token
string | null
X-Blindsight-Component-Id
string | null
X-Blindsight-Workload-Platform
string | null
X-Blindsight-Activity-Type
string | null
X-Blindsight-Device-Token
string | null

Body

application/json
server
string
required

MCP server label the tool belongs to.

Maximum string length: 200
name
string
required

Tool name.

Maximum string length: 200
description
string
default:""

The tool's advertised description.

Maximum string length: 8192
schema
any | null

The tool's JSON input schema (for schema-poisoning detection).

tool_result
string | null

A result the tool returned, to scan for injected content.

Maximum string length: 100000
session_labels
string[]

Data labels active in this session (dataflow checks).

Maximum array length: 64
source_app
string | null
Maximum string length: 128
provider
string | null
Maximum string length: 32
model
string | null
Maximum string length: 128
metadata
Metadata · object | null
playground
boolean
default:false

Response

Successful Response

uuid
string
required
verdict
string
required
reasons
Reasons · object[]
required
registry
Registry · object
required
description_scan
Description Scan · object
required
max_severity
number
required
latency_ms
integer
required
shadowing
Shadowing · object | null
result_scan
Result Scan · object | null
dataflow
Dataflow · object | null
blocked_reason
string | null