> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://api.docs.modulards.com/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://api.docs.modulards.com/_mcp/server. # List scan findings GET https://api.modulards.com/api/public/v1/site-scan-items Lists the findings of the user's malware scans. Narrow with `filter[site_scan][]` for one scan's findings, or `filter[site][]` for every finding of a website across scans. Response attributes: `type` (file, database - which branch the finding came from), `status` (detected, ignored, failed), `severity` (low, medium, high, critical), `threat_category` (infected - cleaned by replacing content; malicious - deleted or truncated; suspicious - needs a human decision), `path` (file findings), `table_name`/`column_name` (database findings), `site_scan_id` and `created_at`. The raw file hash or malware signature name is never exposed. Reference: https://api.docs.modulards.com/modular-ds-public-api/scan-findings/list-scan-findings ## Authentication - `Authorization` header (bearer token, required) — Personal access token created in the Modular DS dashboard; read-only tokens can only call GET endpoints. ## Request ### Query parameters - `filter[id][]` (string, optional) — Exact finding ids (repeatable) - `filter[site_scan][]` (string, optional) — Exact scan ids, one scan's findings (repeatable) - `filter[site][]` (string, optional) — Exact website ids, every finding of a website across scans (repeatable) - `filter[type][]` (string, optional) — file | database (repeatable) - `filter[severity][]` (string, optional) — low | medium | high | critical (repeatable) - `filter[threat_category][]` (string, optional) — infected | malicious | suspicious (repeatable) - `filter[status][]` (string, optional) — detected | ignored | failed (repeatable) - `sort` (string, optional) — created_at, severity; prefix with - to invert. Default: -created_at (newest first). sort=-severity lists critical first - `page[number]` (string, optional) - `page[size]` (string, optional) — Max 50 ## Response ### 200 200 - Scan findings list - `data` (list of object, optional) - `attributes` (object, optional) - `column_name` (string, optional, nullable) - `created_at` (string, optional) - `path` (string, optional, nullable) - `severity` (string, optional) - `site_scan_id` (double, optional) - `status` (string, optional) - `table_name` (string, optional, nullable) - `threat_category` (string, optional) - `type` (string, optional) - `id` (string, optional) - `type` (string, optional) - `jsonapi` (object, optional) - `version` (string, optional) - `meta` (object, optional) - `current_page` (double, optional) - `per_page` (double, optional) - `total` (double, optional) ## Examples **Response** ```json { "data": [ { "attributes": { "column_name": null, "created_at": "2026-09-18T09:12:00.000000Z", "path": "wp-content/uploads/2026/09/shell.php", "severity": "critical", "site_scan_id": 3021, "status": "detected", "table_name": null, "threat_category": "infected", "type": "file" }, "id": "9931", "type": "site-scan-items" }, { "attributes": { "column_name": "post_content", "created_at": "2026-09-18T09:13:00.000000Z", "path": null, "severity": "medium", "site_scan_id": 3021, "status": "detected", "table_name": "wp_posts", "threat_category": "suspicious", "type": "database" }, "id": "9932", "type": "site-scan-items" } ], "jsonapi": { "version": "1.1" }, "meta": { "current_page": 1, "per_page": 15, "total": 2 } } ``` **SDK Code** ```python 200 - Scan findings list import requests url = "https://api.modulards.com/api/public/v1/site-scan-items" headers = {"Authorization": "Bearer "} response = requests.get(url, headers=headers) print(response.json()) ``` ```javascript 200 - Scan findings list const url = 'https://api.modulards.com/api/public/v1/site-scan-items'; const options = {method: 'GET', headers: {Authorization: 'Bearer '}}; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go 200 - Scan findings list package main import ( "fmt" "net/http" "io" ) func main() { url := "https://api.modulards.com/api/public/v1/site-scan-items" req, _ := http.NewRequest("GET", url, nil) req.Header.Add("Authorization", "Bearer ") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby 200 - Scan findings list require 'uri' require 'net/http' url = URI("https://api.modulards.com/api/public/v1/site-scan-items") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Get.new(url) request["Authorization"] = 'Bearer ' response = http.request(request) puts response.read_body ``` ```java 200 - Scan findings list import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.get("https://api.modulards.com/api/public/v1/site-scan-items") .header("Authorization", "Bearer ") .asString(); ``` ```php 200 - Scan findings list request('GET', 'https://api.modulards.com/api/public/v1/site-scan-items', [ 'headers' => [ 'Authorization' => 'Bearer ', ], ]); echo $response->getBody(); ``` ```csharp 200 - Scan findings list using RestSharp; var client = new RestClient("https://api.modulards.com/api/public/v1/site-scan-items"); var request = new RestRequest(Method.GET); request.AddHeader("Authorization", "Bearer "); IRestResponse response = client.Execute(request); ``` ```swift 200 - Scan findings list import Foundation let headers = ["Authorization": "Bearer "] let request = NSMutableURLRequest(url: NSURL(string: "https://api.modulards.com/api/public/v1/site-scan-items")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "GET" request.allHTTPHeaderFields = headers let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```