The ZAST.AI API is the main integration surface for programmatically creating assessments, uploading artifacts, checking diagnostics, and retrieving results.

Base Paths

• /oxpecker/api/v1 covers file upload, diagnostics, domain ownership, browser sessions, task queries, and results lookup.
• /oxpecker/api/v2 is used for newer task creation and report export flows.

Common Workflow

1. Upload the application artifact through POST /oxpecker/api/v1/files/upload.
2. Run network diagnostics with POST /oxpecker/api/v1/network-diagnostics if the target environment must be reachable from ZAST.AI.
3. Verify domain ownership with the random-content and verify endpoints before scanning externally reachable services.
4. Capture authenticated browser state with the browser session endpoints when login is required.
5. Create the assessment task through POST /oxpecker/api/v2/tasks.
6. Poll task state and fetch results or reports after completion.

Capability Groups

• Artifact ingestion: upload deployable packages and source bundles before task creation.
• Environment checks: validate network reachability and deployment assumptions up front.
• Ownership verification: prove control of the target domain before active assessment.
• Authenticated scanning: collect browser session data for flows behind login.
• Task lifecycle: create, inspect, search, and export assessment outputs.

When To Use The Full Reference

Open the interactive reference when you need exact request payloads, enum values, response schemas, or the complete endpoint catalog. Keep this guide as the starting page for workflow-level understanding.