Scan Results

Returns the aggregated scan results for a project, optionally narrowed to a date range. Use this to pull scan history into reporting, dashboards, or alerting on your side.

For deep inspection of a single scan — network requests, screenshots, raw detection output — use Session Data with a session ID returned here.

Endpoint

GET /v1/project/scan_results/{project_id}

Authentication

Bearer token from /login.

Authorization: Bearer <access_token>

Path parameters

Parameter	Type	Required	Description
`project_id`	string	Yes	The ID of the project. Returned by Create a Project or List Projects.

Query parameters

Parameter	Type	Required	Format	Description
`start_date`	string	No	10-character date (`YYYY-MM-DD`)	Earliest scan date to include.
`end_date`	string	No	10-character date (`YYYY-MM-DD`)	Latest scan date to include.

If both dates are omitted, the API returns the project’s full available history. If both are provided, end_date must be on or after start_date.

Example

curl "https://{pinokio-api-url}/v1/project/scan_results/<project_id>?start_date=2026-05-01&end_date=2026-05-23" \
  -H "Authorization: Bearer <access_token>"

Response

200 OK

{
  "project_id": "...",
  "start_date": "...",
  "end_date": "...",
  "scan_results": {}
}

scan_results contains the aggregated detection data for the window — counts of clean scans, scans that triggered alerts, the IDs of the underlying sessions, and the threat categories detected. Use the session IDs with Session Data to drill into individual scans.

Errors

400 Bad Request

Detail	Cause
`Invalid session! Please try again.`	Access token is expired or invalid. Refresh and retry.
`Invalid project ID!`	The project ID does not exist or does not belong to your account.
`Invalid start date format!`	`start_date` is not in `YYYY-MM-DD`.
`Invalid end date format!`	`end_date` is not in `YYYY-MM-DD`.
`End date can not be before start date!`	`end_date` precedes `start_date`.

422 Validation Error — query parameter type or length validation failed.