API guide
Use direct scan requests, case enrichment, async scans, and scoped machine credentials.
Direct scan
POST /v1/scans with submission, scanned_actor, evidence, context, and processing for synchronous verdicts.
Case flow
POST /v1/cases, add evidence-items, then run POST /v1/cases/{case_id}/scans when the evidence bundle is ready.
Async scan
POST /v1/scans with processing.mode="async". Browser-lane scans can inspect links without entering credentials or submitting forms.