Exhaustiveness check — known routes this scan never probed.
GET/v1/scans/:scan_id/surface-coverage
Worker-facing query. Diffs the project's KNOWN url corpus (code/doc/scan discoveries, grouped per host and first path segment) against the routes this scan actually probed (successful active_scan responses). Returns per-area gap lists so the agent can close exhaustiveness gaps before wrapping up. Worker auth is required.
Request
Responses
- 200
- 401
- 404
Coverage report — totals plus per-area unprobed route samples.
Missing or invalid bearer token.
Unknown scan.