Record one completed HTTP response (any status) as a probe observation.
POST/v1/scans/:scan_id/probes
Worker-facing endpoint. Every completed http_request response — including 401/404/5xx — lands here as a response-class probe record, the substrate behind surface coverage's tested / blocked / missing / error distinction. Deliberately separate from the discoveries endpoint: probes never mint asset rows, but an auth-walled route stops masquerading as "never touched" and becomes blocked-route signal. Re-probes of the same URL in the same scan upsert (latest status wins, count accumulates). Worker auth is required.
Request
Responses
- 200
- 204
- 400
- 401
Probe recorded or refreshed; returns the probe row.
Dropped — source_review project, scan not bound to a project, or no structural route key.
Malformed payload.
Missing or invalid bearer token.