StackHawk — API
StackHawk Public APIv0.0.1 Read the vendor's spec ↗
- 69 endpoints
- 2 deprecated
- 7 versions archived since Jul 18, 2026
- Last checked Nov 2, 2026
This is the OpenAPI specification for the StackHawk REST API, affectionately known as _Falcon_ 🦅 #Kaakaww!
Get started
$ curl "https://api.stackhawk.com/api/v1/user" \
-H "Authorization: Bearer $TOKEN"
Set $TOKEN first, then paste.
- Base URL
-
https://api.stackhawk.com - Authenticate
- Bearer token in the Authorization header
What it covers
- Applications 12 Management of StackHawk applications and environments
- Scan Results 10 Management and reporting of user scan results
- Organization Teams 9 Management of Teams in an Organization
- Scan Policies 9 Management of Scan Policies
- Scan Configuration 6 Management of HawkScan Configuration files
- Perch 5 Control the perch service to issue scan commands
- Profile Scans 4 Profile scan results and testability analysis
- Repositories 4 Manage Repositories
- Hosted Oas 3 Management of hosted OAS files
- Api Authentication 2 Authentication and access to the StackHawk API
- Organizations 2 Management and resource creation on behalf of an organization
- Global Configuration 1 Access to global HawkScan Configuration files
Open an endpoint for a runnable command, its inputs and what it returns.
endpoint surface across archived versions
endpoints at that version
added
removed
endpoint changes per archived version — drag across the rail to set a range
Applications 12
-
DELETE
/api/v1/app/{appId}Delete applicationLoading…
-
DELETE
/api/v1/app/{appId}/env/{envId}Delete environmentLoading…
-
GET
/api/v1/app/{appId}Get applicationLoading…
-
GET
/api/v1/app/{appId}/config/{configHash}Get application configLoading…
-
GET
/api/v1/app/{appId}/env/listList Environments deprecatedLoading…
-
GET
/api/v1/app/{orgId}/listList Applications deprecatedLoading…
-
GET
/api/v2/org/{orgId}/appsList Applications - V2Loading…
-
GET
/api/v2/org/{orgId}/envsList Environments - V2Loading…
-
POST
/api/v1/app/{appId}Update applicationLoading…
-
POST
/api/v1/app/{appId}/envCreate environmentLoading…
-
POST
/api/v1/app/{appId}/env/{envId}Update environmentLoading…
-
POST
/api/v1/org/{orgId}/appCreate applicationLoading…
Scan Results 10
-
DELETE
/api/v1/scan/{scanId}Delete a scanLoading…
-
GET
/api/v1/scan/{orgId}List scan resultsLoading…
-
GET
/api/v1/scan/{scanId}/alert/{pluginId}List scan result alert findingsLoading…
-
GET
/api/v1/scan/{scanId}/alertsList scan result alertsLoading…
-
GET
/api/v1/scan/{scanId}/graphql-operationsList scan graphql operationsLoading…
-
GET
/api/v1/scan/{scanId}/jsonrpc-methodsList scan JSON-RPC methodsLoading…
-
GET
/api/v1/scan/{scanId}/uri/{alertUriId}/messages/{messageId}Get scan alert messageLoading…
-
GET
/api/v1/scan/{scanId}/urisList scan urisLoading…
-
POST
/api/v1/org/{orgId}/app/{appId}/env/{envId}/findings/triageBulk triage findings by hashLoading…
-
POST
/api/v1/org/{orgId}/app/{appId}/env/{envId}/findings/triage/notesBulk add notes to findings by hashLoading…
Organization Teams 9
-
DELETE
/api/v1/org/{orgId}/team/{teamId}Delete TeamLoading…
-
GET
/api/v1/org/{orgId}/team/{teamId}Get TeamLoading…
-
GET
/api/v1/org/{orgId}/teamsFind Teams for OrganizationLoading…
-
GET
/api/v1/org/{orgId}/teams/available/applicationsList Available Team ApplicationsLoading…
-
GET
/api/v1/org/{orgId}/teams/available/usersList Available Team UsersLoading…
-
GET
/api/v1/org/{orgId}/user/{userId}/teamsFind Teams for UserLoading…
-
POST
/api/v1/org/{orgId}/teamCreate TeamLoading…
-
PUT
/api/v1/org/{orgId}/team/{teamId}Update TeamLoading…
-
PUT
/api/v1/org/{orgId}/team/{teamId}/applicationUpdate Team ApplicationLoading…
Scan Policies 9
-
GET
/api/v1/app/{appId}/policy/flagsGet application tech flagsLoading…
-
GET
/api/v1/app/{appId}/policy/plugins/{pluginId}/{toggle}Toggle app scan policy pluginLoading…
-
GET
/api/v1/policyGet StackHawk scan policyLoading…
-
GET
/api/v1/policy/allAll StackHawk scan policiesLoading…
-
GET
/api/v1/policy/{orgId}/listList organization Scan PoliciesLoading…
-
GET
/api/v1/policy/{orgId}/{policyName}Get Organization Scan PolicyLoading…
-
POST
/api/v1/policy/{orgId}/updateUpdate Organization Scan PolicyLoading…
-
PUT
/api/v1/app/{appId}/policy/assignAssign app scan policy pluginsLoading…
-
PUT
/api/v1/app/{appId}/policy/flagsUpdate application tech flagsLoading…
Scan Configuration 6
-
DELETE
/api/v1/configuration/{orgId}/{configName}Delete Organization Scan ConfigurationLoading…
-
GET
/api/v1/configuration/{orgId}/listList Organization Scan ConfigurationLoading…
-
GET
/api/v1/configuration/{orgId}/{configName}Get Organization Scan ConfigurationLoading…
-
POST
/api/v1/configuration/{orgId}/renameRename an Organization Scan ConfigurationLoading…
-
POST
/api/v1/configuration/{orgId}/updateUpdate App or Organization Scan ConfigurationLoading…
-
POST
/api/v1/configuration/{orgId}/validateValidate Scan ConfigurationLoading…
Perch 5
-
GET
/api/v1/app/{appId}/perch/statusGet the status of a scanLoading…
-
POST
/api/v1/app/{appId}/perch/profile-scanLaunch Profile ScanLoading…
-
POST
/api/v1/app/{appId}/perch/startStart a hosted scanLoading…
-
POST
/api/v1/app/{appId}/perch/stopStop a hosted scanLoading…
-
POST
/api/v1/org/{orgId}/perch/statusSearch devices for multiple appsLoading…
Profile Scans 4
-
GET
/api/v1/app/{appId}/profile/resultsGet latest profile scan resultLoading…
-
GET
/api/v1/app/{appId}/profile/results/listList profile scan resultsLoading…
-
GET
/api/v1/app/{appId}/profile/results/{scanId}Get specific profile scan resultLoading…
-
POST
/api/v1/org/{orgId}/profile/resultsBulk get latest profile scan resultsLoading…
Repositories 4
-
GET
/api/v1/org/{orgId}/repo/{repoId}/sensitive/listRepository Sensitive DataLoading…
-
GET
/api/v1/org/{orgId}/reposList repositoriesLoading…
-
POST
/api/v1/org/{orgId}/repo/{repoId}/applicationsReplace repository application mappingsLoading…
-
PUT
/api/v1/org/{orgId}/repos/appsAssociate application to repositoryLoading…
Hosted Oas 3
-
GET
/api/v1/oas/{appId}/mappingGet application OpenAPI specsLoading…
-
POST
/api/v1/oas/{appId}/mappingMap application OpenAPI specsLoading…
-
POST
/api/v1/oas/{appId}/uploadUpload OpenAPI Spec fileLoading…
Api Authentication 2
-
GET
/api/v1/auth/loginLogin with API KeyLoading…
-
GET
/api/v1/auth/refresh-tokenRefresh existing authenticationLoading…
Organizations 2
-
GET
/api/v1/org/{orgId}/auditGet audit historyLoading…
-
GET
/api/v1/org/{orgId}/membersList MembersLoading…
Global Configuration 1
-
GET
/api/v1/global-configuration/{configName}Get Global ConfigurationLoading…
Reports 1
-
GET
/api/v1/reports/org/{orgId}/findingsOrganization FindingsLoading…
User 1
-
GET
/api/v1/userGet the current userLoading…
No endpoint matches. Clear the filter to see all 69.
Change log
-
- +GET /api/v1/org/{orgId}/teams/available/applications
- +GET /api/v1/org/{orgId}/teams/available/users
-
- ⚠GET /api/v1/app/{appId}/env/list
- ⚠GET /api/v1/app/{orgId}/list