Session Data

Returns everything Pinokio recorded for a single scan — the network trace, screenshots, detected threats, and any signals collected during the render. Use this to investigate a specific scan, usually one that triggered an alert or appeared in Scan Results.

Endpoint

GET /v1/project/session/{session_id}

Authentication

Bearer token from /login.

Authorization: Bearer <access_token>

Path parameters

Parameter	Type	Required	Description
session_id	string	Yes	The ID of the scan session. Returned in the scan_results payload from Scan Results.

Example

Fetch session data

curl "https://{pinokio-api-url}/v1/project/session/<session_id>" \
  -H "Authorization: Bearer <access_token>"

Response

200 OK — body contains the full session detail. Expected fields include:

• the project and creative the session belongs to,
• the scan timestamp and location,
• the network trace (requests made by the creative during rendering),
• screenshots captured during the scan,
• any threats Pinokio detected, with category and severity,
• any rule matches or signature hits.

Errors

Code	Cause
422	Validation error — session ID missing or malformed.