Patrowl Engines API
Official vendor OpenAPI document · agent-readySecurityVulnerability Managementnone14 EndpointsREST
For Agents
Control Patrowl security scanning engines to start vulnerability scans, check scan progress, retrieve findings, and manage engine configurations across Nmap, SSLLabs, Arachni, and other scanners.
Use for: I need to start a security scan against a target host, I want to check the status of a running scan, Retrieve the vulnerability findings from a completed scan, Stop a running scan by its scan ID
Not supported: Does not handle vulnerability remediation, compliance reporting, or asset inventory - use for scan execution, status monitoring, and finding retrieval only.
The Patrowl Engines API provides a REST interface for controlling security scanning engines including Nmap, SSLLabs, Arachni, VirusTotal, and others. It exposes 14 endpoints for starting scans, checking scan status, retrieving findings, and managing engine configuration. Each engine instance runs as a separate service on a dedicated port and follows the same standardized API contract for scan lifecycle management.
Install Jentic One Beta
Connect the Patrowl Engines API to your agent
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Patrowl Engines API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.
1
Step 1: Jentic One Host machine
# On the machine that will host your Jentic One instance:
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Fpatrowl.local%2Fpatrowl" | sh2
Step 2: Agent machine
# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Fpatrowl.local%2Fpatrowl" | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
Capabilities
What an agent can do with Patrowl Engines API.
Initiate security scans against target hosts using multiple engine types
Monitor scan execution status and retrieve progress updates by scan ID
Retrieve structured vulnerability findings after scan completion
Manage engine lifecycle including configuration reloads and scan cleanup
Stop individual scans or halt all running scans on an engine
Check engine health through liveness and readiness probe endpoints
Clean scan data and temporary files after processing results
Use Cases
Patterns agents use Patrowl Engines API for, with concrete tasks.
★ Automated Vulnerability Scanning
Initiate security scans against target hosts or networks using the /startscan endpoint. Patrowl engines support various scan types including port scanning (Nmap), SSL certificate analysis (SSLLabs), web application scanning (Arachni), and DNS reconnaissance (Owl DNS). Each scan receives a unique ID for status tracking and result retrieval.
Start a scan via POST /startscan with target 'example.com' and scan type 'nmap_portscan', then poll GET /status/{scanId} until completion
Security Findings Collection
Retrieve structured vulnerability findings after scan completion through the /getfindings/{scanId} endpoint. Findings include severity levels, affected hosts, vulnerability descriptions, and remediation guidance. This enables automated security reporting, vulnerability tracking, and integration with ticketing systems for remediation workflows.
Retrieve findings from scan ID 'scan_456' via GET /getfindings/{scanId} and extract all findings with severity 'high' or 'critical'
Engine Health Monitoring
Monitor scanning engine availability and readiness using the /liveness and /readiness endpoints. These health checks verify that the engine process is running and capable of accepting new scans. This supports orchestration platforms that need to route scan requests to healthy engine instances.
Check engine health via GET /liveness and GET /readiness, then retrieve engine info via GET /info to confirm available scan capabilities
AI Agent Security Scan Orchestration
AI agents orchestrate security scans through Jentic by discovering scan operations, initiating scans against targets, and collecting findings without managing engine connectivity directly. Agents search for security scanning operations and receive structured schemas for the standardized Patrowl engine interface.
Search Jentic for 'start a vulnerability scan', load the schema for POST /startscan, execute against target 'test.example.com', then retrieve findings via GET /getfindings/{scanId}
Key Endpoints
14 endpoints — the patrowl engines api provides a rest interface for controlling security scanning engines including nmap, ssllabs, arachni, virustotal, and others.
METHOD
PATH
DESCRIPTION
POST
/startscan
Initiate a new security scan
GET
/status/{scanId}
Check scan progress by ID
GET
/getfindings/{scanId}
Retrieve scan findings
GET
/stop/{scanId}
Stop a running scan
GET
/liveness
Engine liveness health check
GET
/readiness
Engine readiness check
GET
/info
Get engine information and capabilities
GET
/clean/{scanId}
Clean scan data by ID
POST
/startscan
Initiate a new security scan
GET
/status/{scanId}
Check scan progress by ID
GET
/getfindings/{scanId}
Retrieve scan findings
GET
/stop/{scanId}
Stop a running scan
GET
/liveness
Engine liveness health check
GET
/readiness
Engine readiness check
GET
/info
Get engine information and capabilities
GET
/clean/{scanId}
Clean scan data by ID
Why Jentic?
What agents get from Jentic-routed access to this vendor.
Setup
Wiring Patrowl by hand means targeting the right engine host for each scanner (nmap, ssllabs, arachni and others each run on their own port), polling scan status, and pulling findings yourself. Through Jentic you install once, import the Patrowl Engines API from the API Directory, and your agent calls it.
Permission scoping
Patrowl puts the scan id in the URL path (/getfindings/{scanId}), so a rule can pin your agent to one scan: it can check status and read findings and nothing else. You choose the operations it may call, so stopping or cleaning a scan is not included unless you add it.
Credential isolation
Patrowl engines run without authentication, and where a network-level credential is needed it is stored once, encrypted, by your own Jentic One instance and injected at execution time. It never enters the agent's prompt, logs, or context.
Intent-based discovery
Agents search Jentic by intent such as 'start a vulnerability scan against a host' or 'get findings for a scan', and Jentic returns the matching Patrowl operation with its input schema so the agent calls the right endpoint without browsing the reference docs.
Related APIs
Alternatives and complements available in the Jentic catalogue.
Complementary
Snyk API
Developer-focused vulnerability scanning for code dependencies
Use Snyk for software composition analysis and code dependency vulnerabilities. Use Patrowl for infrastructure-level scanning including ports, SSL, and web application vulnerabilities.
FAQs
Specific to using Patrowl Engines API through Jentic.
What authentication does the Patrowl Engines API use?
The Patrowl Engines API does not require authentication by default as it is designed to run on localhost. Security is managed at the network level by restricting access to the engine ports (5001-5014). When deploying in production, network-level access controls or a reverse proxy with authentication should be used.
Which scanning engines does Patrowl support?
Patrowl supports multiple scanning engines each running on dedicated ports: Nmap (port 5001) for port scanning, SSLLabs (5004) for SSL analysis, Arachni (5005) for web application scanning, Owl DNS (5006) for DNS reconnaissance, VirusTotal (5007) for malware checks, URLVoid (5008) for URL reputation, Cortex (5009) for threat intelligence, and several others.
How do I retrieve vulnerability findings from a scan?
After starting a scan via POST /startscan, poll GET /status/{scanId} until the scan status shows completion. Then retrieve structured findings via GET /getfindings/{scanId}. Findings include severity level, affected target, description, and remediation guidance. Results can be cleaned after processing via GET /clean/{scanId}.
Can I stop a running scan?
Yes. Individual scans can be stopped via GET /stop/{scanId} using the scan ID returned when the scan was started. To stop all running scans on an engine, use GET /stopscans. Partially completed scans may still have findings available via the getfindings endpoint.
How do I start a security scan through Jentic?
Search Jentic for 'start a security vulnerability scan', load the operation schema for POST /startscan, and execute with target and scan configuration parameters. Jentic handles the engine routing and returns structured findings. Install with pip install jentic.
What is the difference between liveness and readiness endpoints?
GET /liveness confirms the engine process is running and responsive. GET /readiness confirms the engine is configured and capable of accepting new scan requests. An engine may be alive but not ready if it is still loading configuration or has reached maximum concurrent scan capacity.
Can I limit what my agent is allowed to do with the Patrowl Engines API?
Yes. Because you run Jentic One yourself, your own rules decide which Patrowl operations and credentials your agent can use. Since Patrowl puts the scan ID in the URL path, such as GET /getfindings/{scanId} and GET /status/{scanId}, you can pin an agent to a single scan so it only checks status and reads findings. Destructive operations like GET /stop/{scanId} or GET /clean/{scanId} stay out of reach unless you explicitly grant them.
GET STARTED