Install Jentic One Beta

Connect the CodeScan API to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the CodeScan API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.

Step 1: Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Fcode-scan.com%2Fcode-scan" | sh

Step 2: Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Fcode-scan.com%2Fcode-scan" | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with CodeScan API.

Submit a CodeScan scan job for a Salesforce codebase from an external CI or pipeline

Check the status and result of a previously submitted scan job

Drive scan execution from a non-UI workflow such as a custom DevOps pipeline

Gate Salesforce deployments on the outcome of a fresh CodeScan run

Use Cases

Patterns agents use CodeScan API for, with concrete tasks.

GET STARTED

Start building with CodeScan API

Explore with Jentic One

View OpenAPI Document

★ Salesforce CI Quality Gate

DevOps teams running Salesforce projects use the CodeScan API to drive scans from their own CI system rather than the CodeScan UI. The CI submits a scan via POST /job and polls the job endpoint for completion, failing the build if the scan returns new violations. This keeps the quality gate in the team's primary pipeline without forcing engineers to switch tools.

Submit a new CodeScan job for the project, poll the job endpoint until the scan completes, and report the result to the CI runner.

Pull Request Code Review Automation

Engineering teams trigger a CodeScan run on every Salesforce pull request to surface new code-quality and security issues before merge. The /job endpoint accepts the scan submission and exposes status retrieval so the PR check can wait for results and post a summary back to the developer.

Trigger a CodeScan job for the PR branch, wait for completion, and summarise the result for the PR comment.

Scheduled Codebase Health Reports

Platform teams schedule a nightly CodeScan run to track Salesforce codebase health over time. The API submission and status endpoints let an automation kick off the scan and store the outcome in a metrics dashboard so the team sees trends in violations, complexity, and security findings.

Run a CodeScan job nightly at 02:00 and persist the job outcome to the engineering metrics dashboard.

AI Agent Code Review Assistant

AI agents helping Salesforce developers use the CodeScan API through Jentic to fetch fresh scan results before reviewing code. The agent searches Jentic for 'submit a CodeScan job', loads the operation, runs the scan, and waits for the result. Jentic stores the CodeScan basic-auth credentials in its vault so the subscription ID and API key never enter the agent's context.

Search Jentic for 'codescan job', load the POST /job operation, submit a scan, then check status until complete.

Key Endpoints

2 endpoints — codescan is a hosted salesforce code-quality and security scanning service.

METHOD

PATH

DESCRIPTION

POST

/job

Submit a new CodeScan scan job

GET

/job

Read the status and outcome of an existing job

POST

/job

Submit a new CodeScan scan job

GET

/job

Read the status and outcome of an existing job

Why Jentic?

What agents get from Jentic-routed access to this vendor.

Setup

Wiring CodeScan by hand means building its Basic auth header from a Subscription ID and API key, targeting app.code-scan.com/api, and polling job status yourself. Through Jentic you install once, import the CodeScan API from the API Directory, store those credentials once, and your agent calls it.

Permission scoping

CodeScan identifies a scan through the request body and query rather than a resource id in the URL path, so scope the agent by operations rather than by one job: limit it to the operations it needs, such as submitting a scan job or checking job status. Every operation you credit the agent with stays inside that allowed set.

Credential isolation

Your CodeScan Subscription ID and API key are stored once, encrypted, by your own Jentic One instance and injected at execution time as the Basic Authorization header. They never enter the agent's prompt, logs, or context.

Intent-based discovery

Agents search Jentic by intent such as 'submit a Salesforce code scan' or 'check a CodeScan job status', and Jentic returns the matching CodeScan operation with its input schema so the agent calls the right endpoint without browsing the reference docs.

FAQs

Specific to using CodeScan API through Jentic.

What authentication does the CodeScan API use?

The API uses HTTP Basic authentication. The username is your CodeScan Subscription ID and the password is the API key from your subscription page. The single security scheme in the spec is named codescan_auth. Through Jentic, both values are stored encrypted in the vault and the Authorization header is constructed at execution time.

Can I trigger a CodeScan scan from CI with the CodeScan API?

Yes. POST /job submits a new scan job and GET /job retrieves status, so a CI runner can trigger a scan and poll until completion. This is the supported integration path for teams that want CodeScan to run inside their own pipeline rather than the CodeScan UI.

What are the rate limits for the CodeScan API?

The OpenAPI spec does not declare a fixed rate limit. CodeScan's job concurrency is governed by your subscription tier; if you submit more concurrent scans than the subscription allows the API returns an error indicating the limit. Check your CodeScan subscription page for the current concurrency.

How do I submit a scan job through Jentic?

Search Jentic for 'codescan submit job', load the POST /job operation, and execute it with the required job inputs. Install with pip install jentic and use the standard async search, load, and execute flow.

Does the CodeScan API expose individual violation details?

The public OpenAPI spec exposes only the /job resource with submit and status operations. Detailed violation listings are surfaced through the CodeScan web UI and reports rather than this API surface, so use /job for orchestration and the UI or downloadable reports for per-violation review.

Can I limit what my agent is allowed to do with the CodeScan API?

Yes. Because you run Jentic One yourself, your own rules decide which CodeScan operations and credentials the agent may use. The CodeScan API scopes by operation rather than by a job id in the URL path, so you can allow the agent to submit a scan job with POST /job while withholding status reads via GET /job, or grant only status checks and no new submissions. The agent can call only the operations you have credited it with, and it never sees the Subscription ID or API key behind the Basic auth header.

CodeScan API

Name: CodeScan API
Brand: CodeScan API
Availability: InStock

Community OpenAPI document · agent-readyDeveloper ToolsTesting Qabasic2 EndpointsREST

Know of an official OpenAPI document? Contribute it →

For Agents

Submit and check the status of CodeScan code-quality and security scan jobs for Salesforce projects.

Use for: I want to start a CodeScan scan for my Salesforce repository, Check the status of a CodeScan job by its identifier, Trigger a code quality scan from a CI pipeline, Find out whether the latest CodeScan run finished successfully

Not supported: Does not handle source-control hosting, dependency vulnerability scanning, or build orchestration - use for submitting and checking Salesforce-focused CodeScan jobs only.

CodeScan is a hosted Salesforce code-quality and security scanning service. Its public API exposes the job resource so external systems can submit scan jobs and check their status without using the CodeScan UI. Teams use it to wire CodeScan into custom CI flows, Salesforce DevOps pipelines, and quality gates that block deployment when a scan reports new violations.

Jentic One on Github View OpenAPI Document

Connect the CodeScan API to your agent

Capabilities

Use Cases

Start building with CodeScan API

Key Endpoints

Why Jentic?

Related APIs

FAQs

CodeScan API