Pentest-Tools.com LogoPentest-Tools.com REST API Reference
  • Limits
  • Sample API client
  • Targets
    • Get all targetsget
    • Create a targetpost
    • Get target by IDget
    • Delete a Targetdelete
  • Scans
    • Get all scansget
    • Start a scanpost
    • Get scan information by IDget
    • Delete a scandelete
    • Get scan output by IDget
    • Get scan raw output by IDget
    • Stop an active scanpost
  • Workspaces
    • Get all workspacesget
    • Create a workspacepost
    • Get workspace by IDget
    • Edit workspaceput
    • Delete workspacedelete
  • HTTP Loggers
    • Get all HTTP loggersget
    • Create a HTTP loggerpost
    • Get logger information by IDget
    • Delete a loggerdelete
    • Get the data for a loggerget
    • Clear the data for a loggerdelete
  • Wordlists
    • Get all wordlistsget
    • Get wordlist information by IDget
    • Delete a wordlistdelete
    • Get wordlist contents by IDget
  • Finding Templates
    • Get all finding templatesget
  • VPN Profiles
    • Get all VPN profilesget
  • Findings
    • Get all findingsget
    • Get finding information by IDget
  • Reports
    • Get all reportsget
    • Create a reportpost
    • Get report information by IDget
    • Delete a reportdelete
    • Download a reportget

Limits

This section describes various limits for the API.

Request rate limits

By default, there is a rate limit of 250 API requests per minute per user. /scans/{id}/output has a lower limit, of 60 requests per minute, while POST requests have a 125 API requests per minute limit.

You can inspect the actual limit for a request, as well as how many requests you have remaining, by making a request and looking at the X-RateLimit-Limit and X-RateLimit-Remaining headers.