Skip to main content
POST
/hackerone/programs/scopes

Authorizations

access-token
string
header
required

API token from the dashboard

Headers

access-token
string
required

Body

application/json
handle
string
required
Minimum string length: 1
count
integer
required
Required range: x >= 1
timeout
integer
default:300
Required range: 20 <= x <= 1500
search
string | null
eligible_for_submission
boolean | null
eligible_for_bounty
boolean | null
min_severity
enum<string> | null
Available options:
none,
low,
medium,
high,
critical
asset_types
enum<string>[] | null
Available options:
CIDR,
URL,
APPLE_STORE_APP_ID,
TESTFLIGHT,
OTHER_IPA,
GOOGLE_PLAY_APP_ID,
OTHER_APK,
WINDOWS_APP_STORE_APP_ID,
SOURCE_CODE,
DOWNLOADABLE_EXECUTABLES,
SMART_CONTRACT,
WILDCARD,
IP_ADDRESS,
HARDWARE,
OTHER,
AI_MODEL,
API,
AWS_CLOUD_CONFIG,
AZURE_CLOUD_CONFIG
sort_direction
enum<string>
default:DESC
Available options:
DESC,
ASC

Response

Successful Response

identifier
string
required
@type
string
default:HackeroneScope
id
string | null
asset_type
string | null
display_name
string | null
instruction
string | null
max_severity
string | null
eligible_for_bounty
boolean | null
eligible_for_submission
boolean | null
is_new
boolean | null
system_tags
string[]
reward_tags
string[]
resolved_report_count
integer | null
created_at
string | null
updated_at
string | null
attachments
object[]