Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

HostedScan (BYOK) — connector documentation

  • MCP endpoint: https://byok-hostedscan.connectorbay.com/mcp
  • REST API: POST https://byok-hostedscan.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-hostedscan.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own HostedScan HostedScan API key, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-hostedscan.connectorbay.com/health · Tool schemas: https://byok-hostedscan.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-hostedscan · agent@connectorbay.com

What HostedScan (BYOK) is for

HostedScan (BYOK) lets an AI assistant read your own HostedScan data through the HostedScan API with a key you supply (HostedScan API key). Read-only: 7 tools (list_targets, get_target, list_scans, get_scan, list_scheduled_scans, list_risks, get_risk). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.hostedscan.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by HostedScan. HostedScan and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which targets do I scan with HostedScan and what are their health grades?"
  • "Show HostedScan target t1"
  • "Which HostedScan scans failed recently?"
  • "How did HostedScan scan s1 go?"
  • "What scans are scheduled in HostedScan?"
  • "What high threat risks are open in HostedScan?"

What it does

  • list_targets: List scan targets (domains, IPs, URLs) with label, tags and health score and grade, newest first.
  • get_target: Get one scan target by id with label, tags and health score.
  • list_scans: List scans, newest first, with scanner type, state, progress, authenticated flag and requested targets.
  • get_scan: Get one scan by id: scanner type, state, progress, requested targets and the ids of risks that were newly opened, still open or closed.
  • list_scheduled_scans: List scheduled scans with name, cron-style schedule, scanner types and last and next run.
  • list_risks: List risks (findings) including closed ones, newest first, with target, status, threat level, scanner, title, CVSS and accepted flag. Descriptions and solutions are left out.
  • get_risk: Get one risk by id with target, status, scanner, title, threat level and CVSS.

BYOK key

You bring your own HostedScan HostedScan API key (https://docs.hostedscan.com/developer-api). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.hostedscan.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the HostedScan API (api.hostedscan.com) with a BYOK key; documentation: https://docs.hostedscan.com/api/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by HostedScan. HostedScan and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your HostedScan account.

Built for: Worldwide. Languages: English.