Skip to main content
GET
/
api
/
v1
/
external
/
results
/
{runId}
Get run results
curl --request GET \
  --url https://rts-builder.slayers.tech/api/v1/external/results/{runId} \
  --header 'X-API-Key: <api-key>'
{
  "aggregate": {
    "findings_by_severity": {
      "critical": 0,
      "high": 0,
      "info": 6,
      "low": 0,
      "medium": 0
    },
    "risk_score": 0,
    "total_findings": 6,
    "unique_hosts": 6,
    "unique_subdomains": 6
  },
  "run_id": "9bdeb4af-cab4-4de3-9f0f-758771d10991",
  "status": "completed",
  "steps": [
    {
      "exit_code": 0,
      "id": "993af399-0e1a-456e-ba12-d465e7f9a5e6",
      "status": "completed",
      "tool": "crt",
      "parsed_results": {
        "tool": "crt",
        "type": "ct_enumeration",
        "summary": {
          "total_subdomains": 6
        },
        "findings": [
          {
            "type": "subdomain",
            "severity": "info",
            "title": "| docs.techslayers.ca |",
            "detail": "CT log subdomain: | docs.techslayers.ca |",
            "host": "| docs.techslayers.ca |",
            "port": 0,
            "extra": {
              "source": "certificate_transparency"
            }
          }
        ]
      }
    }
  ]
}

Get run results

Top-level fields

  • aggregate: Summary counters across the run
  • run_id: Run UUID
  • status: Terminal or in-progress run state
  • steps: Per-tool parsed result payloads

Aggregate fields

  • findings_by_severity
  • risk_score
  • total_findings
  • unique_hosts
  • unique_subdomains

Per-step fields

  • exit_code
  • id
  • status
  • tool
  • parsed_results
parsed_results is tool-specific. In the crt runs tested for these docs, it contained:
  • tool
  • type
  • summary
  • findings

Parser caveat

The current crt adapter did not fully clean its CLI output before building findings. Decorative table rows and one database recovery error line were surfaced as finding.host values during live testing. If you consume results programmatically, sanitize entries instead of assuming every host value is a valid hostname.

Authorizations

X-API-Key
string
header
required

Team-scoped RTS Builder API key.

Path Parameters

runId
string<uuid>
required

Run UUID.

Example:

"9bdeb4af-cab4-4de3-9f0f-758771d10991"

Response

Run results retrieved successfully.

aggregate
object
required
run_id
string<uuid>
required
status
enum<string>
required
Available options:
pending,
running,
completed,
failed,
cancelled
steps
object[]
required