REST API

Programmatic scans + finding webhooks. Authenticate with a personal API token from/app/settings.

# create a target
curl -X POST $MARA_HOST/api/targets \
  -H "authorization: Bearer $MARA_TOKEN" \
  -d '{"name":"Acme","primary_domain":"acme.com"}'

# stream live scan events
curl -N $MARA_HOST/api/scans/$SCAN_ID/events