List bulk scans
GET/config/integrations/edr/bulk-scans
Returns bulk scan summaries, newest first by start_time.
This endpoint has its own paging and always wraps the result as {docs, page, pages, total, limit}; no X-Pagination-* headers. Paging uses page and limit. When limit is omitted it is 100 (the maximum). A limit above 100 is clamped to 100, and a limit that is 0, negative or not a number falls back to 25. A page below 1 or not a number is treated as 1, and a page past the end returns an empty docs array. status is upper-cased by the server; an unrecognised value is not rejected and matches nothing (200 with an empty docs array). An unparsable startDate or endDate is ignored rather than rejected. end_time and duration_seconds are omitted from a summary that has not recorded them. Required role: superadmin or admin.
Request
Responses
- 200
- 401
- 403
A page of bulk scan summaries.
No token, or the token is invalid or expired. The body is {message}: No auth token provided when no token is sent, otherwise the token check's message (jwt expired, jwt malformed, invalid signature, invalid token, jwt signature is required). Send Authorization: Bearer <token> exactly: the server drops the first seven characters of the header and reads the rest as the token, so a different scheme or an extra space fails. If Authorization is absent, the server reads a token field in the body, then a token query parameter, then x-access-token. Routes that validate query fields reject ?token= with 400 InvalidQuery.
The token's role is not allowed for this operation, or the token's scopes exclude the route
(Scope not allowed by token).