> ## Documentation Index > Fetch the complete documentation index at: https://docs.tracecat.com/llms.txt > Use this file to discover all available pages before exploring further. # ProjectDiscovery > Reference for the Tracecat ProjectDiscovery integration: registered actions, required secrets, expected inputs, and example workflow usage. ## Create enumeration Action ID: `tools.project_discovery.create_enumeration` Create an asset enumeration. Calls POST /v1/asset/enumerate directly. Reference: [https://docs.projectdiscovery.io/api-reference/enumerations/create-enumeration](https://docs.projectdiscovery.io/api-reference/enumerations/create-enumeration) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields Enable agent auto discovery. Default: `null`. Agent behavior (distribute or mirror). Defaults to distribute. Default: `null`. Agent ID. Default: `null`. Agent networks. Default: `null`. Agent tags. Default: `null`. Alerting config IDs. Default: `null`. Enable automatic vulnerability scans. Default: `null`. ProjectDiscovery Cloud API base URL. Default: `null`. Cloudlist config IDs. Default: `null`. Disable the global alert config. Default: `null`. Enrichment inputs. Default: `null`. Enumeration config object (documented keys are follow-redirect and ports). Default: `null`. Enumeration ports. Default: `null`. Targets to exclude. Default: `null`. Combined inclusion and exclusion patterns for discovery scope. Exclusion patterns (e.g. `*.staging.company.com`) filter out matching targets. Inclusion patterns use a `+` prefix (e.g. `+prod-*.company.com`) to restrict discovery to only matching targets (allowlist mode). When inclusion patterns are present, targets must match at least one inclusion pattern and not match any exclusion pattern. Supports exact domains, wildcard patterns, IP addresses, and CIDR ranges. Default: `null`. Enumeration name. Default: `null`. Enable per-domain enumeration. Default: `null`. Root domains to enumerate. Default: `null`. Enumeration steps to run (dns\_resolve, dns\_bruteforce, dns\_permute, port\_scan, http\_probe, http\_screenshot, endpoint\_crawling, dns\_passive, tls\_scan, uncover\_assets, dns\_scraping). Default: `null`. Retrieve the Team ID from: [https://cloud.projectdiscovery.io/settings/team](https://cloud.projectdiscovery.io/settings/team) Default: `null`. ## Create scan Action ID: `tools.project_discovery.create_scan` Create a vulnerability scan. Calls POST /v1/scans directly. Reference: [https://docs.projectdiscovery.io/api-reference/scans/create-scan](https://docs.projectdiscovery.io/api-reference/scans/create-scan) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields Agent behavior (distribute or mirror). Defaults to distribute. Default: `null`. Agent ID. Default: `null`. Agent networks. Default: `null`. Agent tags. Default: `null`. Alerting config IDs. Default: `null`. Run all templates. Default: `null`. Asset filters object (documented keys are is\_tech, is\_favicon, is\_new, labels, host, port, status\_code, content\_length, title, domain, cname, technologies, ip, is\_screenshot, time, start\_date, end\_date, custom\_filter, search, enumeration\_ids, only\_dns, only\_ip, not\_seen\_for\_days). Default: `null`. Assets to scan. Default: `null`. Enable automatic scan. Default: `null`. ProjectDiscovery Cloud API base URL. Default: `null`. Disable the global alert config. Default: `null`. Disable the global report config. Default: `null`. Disable the global scan config. Default: `null`. Early templates to run. Default: `null`. Array of EnumerationIds objects. Each object requires `id` (string). Default: `null`. Targets to exclude. Default: `null`. Combined inclusion and exclusion patterns for scan scope. Exclusion patterns (e.g. `*.staging.company.com`) filter out matching targets. Inclusion patterns use a `+` prefix (e.g. `+prod-*.company.com`) to restrict scanning to only matching targets (allowlist mode). When inclusion patterns are present, targets must match at least one inclusion pattern and not match any exclusion pattern. Supports exact domains, wildcard patterns, IP addresses, and CIDR ranges. Default: `null`. Scan name. Default: `null`. Array of PrivateTemplates objects. Each object requires `name` (string) and `contents` (string). Default: `null`. Run recommended templates. Default: `null`. Reporting config IDs. Default: `null`. Scan all assets. Default: `null`. Scan config IDs. Default: `null`. Only schedule the scan. Default: `null`. SOCKS5 proxy. Default: `null`. Targets to scan. Default: `null`. Retrieve the Team ID from: [https://cloud.projectdiscovery.io/settings/team](https://cloud.projectdiscovery.io/settings/team) Default: `null`. Templates to run. Default: `null`. ## Get associated domains Action ID: `tools.project_discovery.get_associated_domains` Get associated domains. Calls GET /v1/domain/associated directly. Reference: [https://docs.projectdiscovery.io/api-reference/enumerations/get-associated-domains](https://docs.projectdiscovery.io/api-reference/enumerations/get-associated-domains) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields Filter by liveness (true=alive, false=unreachable). Default: `null`. ProjectDiscovery Cloud API base URL. Default: `null`. Domain name to fetch associated domains. If omitted, returns associated domains for all your verified domains. Default: `null`. Maximum results per page (pagination). If omitted, returns all. Default: `null`. Page number (pagination, starts at 1). Default: `null`. If true, returns plain text list (one domain per line). Default: `null`. Sort results (active, domain, source, subdomain\_count, update\_date). Default: `null`. Comma-separated source filter (acquisition\_history, certificate\_history, whois\_history). Default: `null`. Retrieve the Team ID from: [https://cloud.projectdiscovery.io/settings/team](https://cloud.projectdiscovery.io/settings/team) Default: `null`. ## Get domain leak stats Action ID: `tools.project_discovery.get_domain_leak_stats` Get public domain leak statistics. Calls GET /v1/leaks/stats/domain directly. No API key is required. Reference: [https://docs.projectdiscovery.io/api-reference/leaks/get-domain-stats](https://docs.projectdiscovery.io/api-reference/leaks/get-domain-stats) ### Input fields Domain to get leak statistics for. ProjectDiscovery Cloud API base URL. Default: `null`. Unmask email addresses in the results. Default: `null`. ## Get email leak stats Action ID: `tools.project_discovery.get_email_leak_stats` Get public email leak statistics. Calls GET /v1/leaks/stats/email directly. No API key is required. Reference: [https://docs.projectdiscovery.io/api-reference/leaks/get-email-stats](https://docs.projectdiscovery.io/api-reference/leaks/get-email-stats) ### Input fields Email to get stats for. ProjectDiscovery Cloud API base URL. Default: `null`. Unmask email addresses in the results. Default: `null`. ## Get enumeration Action ID: `tools.project_discovery.get_enumeration` Get an enumeration. Calls GET /v1/asset/enumerate/\{enumerate\_id} directly. Reference: [https://docs.projectdiscovery.io/api-reference/enumerations/get-enumeration](https://docs.projectdiscovery.io/api-reference/enumerations/get-enumeration) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields Enumeration ID. ProjectDiscovery Cloud API base URL. Default: `null`. Retrieve the Team ID from: [https://cloud.projectdiscovery.io/settings/team](https://cloud.projectdiscovery.io/settings/team) Default: `null`. ## Get enumeration contents Action ID: `tools.project_discovery.get_enumeration_contents` Get enumeration contents. Calls GET /v1/asset/enumerate/\{enumerate\_id}/contents directly. Reference: [https://docs.projectdiscovery.io/api-reference/enumerations/get-enumeration-contents](https://docs.projectdiscovery.io/api-reference/enumerations/get-enumeration-contents) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields Enumeration ID. ProjectDiscovery Cloud API base URL. Default: `null`. cname to filter Default: `null`. Filter by comma separated content lengths, e.g-> content\_length=p1,p2 Default: `null`. custom query to filter. double encode the query string. Default: `null`. Filter by comma separated domain names, e.g-> domain=domain1.com,domain2.com Default: `null`. time filter end date (YYYY-MM-DD). Default: `null`. Filter by comma separated favicons, e.g-> favicon=p1,p2 Default: `null`. Filter by comma separated hosts, e.g-> host=p1,p2 Default: `null`. ips to filter Default: `null`. Return the records that have favicon. Default: `null`. filter by is\_internal (internal vs external hosts) Default: `null`. Filter by new content. Default: `null`. asset with screenshots Default: `null`. Return records that have technologies. Default: `null`. Filter by comma separated labels, e.g-> labels=p1,p2 Default: `null`. The numbers of items to return. Default: `null`. Return assets that haven't been seen in the last N days. An asset is only included if a scan that covers it has run during that period without rediscovering it, so assets that simply haven't been rescanned recently are not matched. Default: `null`. The number of items to skip before starting to collect the result set. Default: `null`. Query only dns FQDN records. Default: `null`. Query only dns IP records. Default: `null`. Filter by comma separated ports, e.g-> port=p1,p2 Default: `null`. Search on the content name. Default: `null`. comma separated ascending sorting e.g sort\_asc=created\_at,name Default: `null`. comma separated descending sorting e.g sort\_desc=created\_at,name Default: `null`. time filter start date (YYYY-MM-DD). Default: `null`. Filter by comma separated status codes, e.g-> status\_code=p1,p2 Default: `null`. Retrieve the Team ID from: [https://cloud.projectdiscovery.io/settings/team](https://cloud.projectdiscovery.io/settings/team) Default: `null`. technologies to filter Default: `null`. time filter to select (last\_day, last\_week, last\_month, last\_3\_months, last\_6\_months, last\_12\_months, all\_time). Defaults to all\_time. Default: `null`. Filter by comma separated titles, e.g-> title=p1,p2 Default: `null`. ## Get leak info Action ID: `tools.project_discovery.get_leak_info` Get leak information. Calls POST /v1/leaks/info directly. Reference: [https://docs.projectdiscovery.io/api-reference/leaks/get-leak-info](https://docs.projectdiscovery.io/api-reference/leaks/get-leak-info) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields 32-character MD5 hash identifying the leak (from list\_leaks). ProjectDiscovery Cloud API base URL. Default: `null`. ## Get scan Action ID: `tools.project_discovery.get_scan` Get a scan. Calls GET /v1/scans/\{scan\_id} directly. Reference: [https://docs.projectdiscovery.io/api-reference/scans/get-scan](https://docs.projectdiscovery.io/api-reference/scans/get-scan) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields Scan ID. ProjectDiscovery Cloud API base URL. Default: `null`. Retrieve the Team ID from: [https://cloud.projectdiscovery.io/settings/team](https://cloud.projectdiscovery.io/settings/team) Default: `null`. ## Get vulnerability Action ID: `tools.project_discovery.get_vulnerability` Get a vulnerability finding. Calls GET /v2/vulnerability/\{vulnerability\_id} directly. Reference: [https://docs.projectdiscovery.io/api-reference/get-vulnerability-by-id](https://docs.projectdiscovery.io/api-reference/get-vulnerability-by-id) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields Vulnerability ID. ProjectDiscovery Cloud API base URL. Default: `null`. template data fields Default: `null`. ## Get vulnerability filters Action ID: `tools.project_discovery.get_vulnerability_filters` Get vulnerability filters. Calls GET /v2/vulnerability/filters directly. Reference: [https://docs.projectdiscovery.io/api-reference/get-all-filters-for-vulnerabilities](https://docs.projectdiscovery.io/api-reference/get-all-filters-for-vulnerabilities) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields ProjectDiscovery Cloud API base URL. Default: `null`. ## Get vulnerability timeline Action ID: `tools.project_discovery.get_vulnerability_timeline` Get a vulnerability timeline. Calls GET /v2/vulnerability/\{vulnerability\_id}/timeline directly. Reference: [https://docs.projectdiscovery.io/api-reference/results/get-vulnerability-timeline](https://docs.projectdiscovery.io/api-reference/results/get-vulnerability-timeline) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields Vulnerability ID. ProjectDiscovery Cloud API base URL. Default: `null`. Filter by event types (comma-separated). Supported values are detected, status\_change, resolved, reopened, severity\_change, template\_released, template\_updated. If not provided, returns all events. Default: `null`. ## List enumeration contents Action ID: `tools.project_discovery.list_enumeration_contents` List enumeration contents. Calls GET /v1/asset/enumerate/contents directly. Reference: [https://docs.projectdiscovery.io/api-reference/enumerations/get-all-enumeration-contents](https://docs.projectdiscovery.io/api-reference/enumerations/get-all-enumeration-contents) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields ProjectDiscovery Cloud API base URL. Default: `null`. cname to filter Default: `null`. Filter by comma separated content lengths, e.g-> content\_length=p1,p2 Default: `null`. custom query to filter. double encode the query string. Default: `null`. Filter by comma separated domain names, e.g-> domain=domain1.com,domain2.com Default: `null`. Filter by comma separated favicons, e.g-> favicon=p1,p2 Default: `null`. Filter by comma separated hosts, e.g-> host=p1,p2 Default: `null`. ips to filter Default: `null`. Return the records that have favicon. Default: `null`. filter by is\_internal (internal vs external hosts) Default: `null`. Filter by new content. Default: `null`. asset with screenshots Default: `null`. Return records that have technologies. Default: `null`. Filter by comma separated labels, e.g-> labels=p1,p2 Default: `null`. The numbers of items to return. Default: `null`. Return assets that haven't been seen in the last N days. An asset is only included if a scan that covers it has run during that period without rediscovering it, so assets that simply haven't been rescanned recently are not matched. Default: `null`. The number of items to skip before starting to collect the result set. Default: `null`. Query only dns FQDN records. Default: `null`. Query only dns IP records. Default: `null`. Filter by comma separated ports, e.g-> port=p1,p2 Default: `null`. Search on the content name. Default: `null`. comma separated ascending sorting e.g sort\_asc=created\_at,name Default: `null`. comma separated descending sorting e.g sort\_desc=created\_at,name Default: `null`. Filter by comma separated status codes, e.g-> status\_code=p1,p2 Default: `null`. Retrieve the Team ID from: [https://cloud.projectdiscovery.io/settings/team](https://cloud.projectdiscovery.io/settings/team) Default: `null`. technologies to filter Default: `null`. time filter to select (last\_day, last\_week, last\_month, last\_3\_months, last\_6\_months, last\_12\_months, all\_time). Defaults to all\_time. Default: `null`. Filter by comma separated titles, e.g-> title=p1,p2 Default: `null`. ## List enumerations Action ID: `tools.project_discovery.list_enumerations` List asset enumerations. Calls GET /v1/asset/enumerate directly. Reference: [https://docs.projectdiscovery.io/api-reference/enumerations/get-enumeration-list](https://docs.projectdiscovery.io/api-reference/enumerations/get-enumeration-list) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields ProjectDiscovery Cloud API base URL. Default: `null`. custom query to filter. double encode the query string. Default: `null`. time filter end date (YYYY-MM-DD). Default: `null`. types of enumeration list (comma seperated) Default: `null`. filter by internal enumerations Default: `null`. The numbers of items to return. Default: `null`. The number of items to skip before starting to collect the result set. Default: `null`. search keyword in enumeration list Default: `null`. comma separated ascending sorting e.g sort\_asc=created\_at,name Default: `null`. comma separated descending sorting e.g sort\_desc=created\_at,name Default: `null`. time filter start date (YYYY-MM-DD). Default: `null`. comma separated filter enumeration result by status Default: `null`. Retrieve the Team ID from: [https://cloud.projectdiscovery.io/settings/team](https://cloud.projectdiscovery.io/settings/team) Default: `null`. time range to get enumerations from (last\_day, last\_week, last\_month, last\_3\_months, last\_6\_months, last\_12\_months, all\_time). Defaults to all\_time. Default: `null`. ## List leaks Action ID: `tools.project_discovery.list_leaks` List leaks. Calls GET /v1/leaks directly. Reference: [https://docs.projectdiscovery.io/api-reference/leaks](https://docs.projectdiscovery.io/api-reference/leaks) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields ProjectDiscovery Cloud API base URL. Default: `null`. Filter by specific country (used with group\_by for drill-down). Default: `null`. Filter by specific device IP (used with group\_by for drill-down). Default: `null`. Filter leaks by specific domain (applies to employee/customer leaks). Default: `null`. Filter leaks by specific email (can be personal, employee, or customer email from user's authorized results). Default: `null`. time filter end date (YYYY-MM-DD). Default: `null`. Group results by field - returns group summaries when used without field-specific filtering. Supported fields are url, country, device\_ip, hostname, email, hardware\_id. Default: `null`. Filter by specific hardware ID (used with group\_by for drill-down). Default: `null`. Filter by specific hostname (used with group\_by for drill-down). Default: `null`. Number of results per page for pagination. Default: `null`. Page number for pagination (starts from 1). Default: `null`. Search query to filter results across all fields. Default: `null`. supported sort fields (url, username, log\_date, country, device\_ip, host\_username, hostname, os, hardware\_id, malware\_path) Default: `null`. supported sort order (asc or desc) Default: `null`. time filter start date (YYYY-MM-DD). Default: `null`. supported status (fixed or open) Default: `null`. Time range (all\_time, current\_month, last\_month, last\_3\_months, last\_6\_months, last\_12\_months). Defaults to all\_time. Default: `null`. Filter by specific leak type (single value only). Supported values are all, personal, employee, customer, external\_vendor\_leaks, organization\_leaks. Default: `null`. Filter by specific URL (used with group\_by for drill-down). Default: `null`. ## List scan results Action ID: `tools.project_discovery.list_scan_results` List vulnerability scan results. Calls GET /v1/scans/results directly. Reference: [https://docs.projectdiscovery.io/api-reference/results/get-all-results](https://docs.projectdiscovery.io/api-reference/results/get-all-results) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields Asset details for the vulnerability. Default: `null`. ProjectDiscovery Cloud API base URL. Default: `null`. filter by comma separated categories e.g category=cve,xss Default: `null`. comma separated domain names e.g-> domain=domain1.com,domain2.com Default: `null`. comma separated host e.g. hosts=[https://example.com,https://x.com](https://example.com,https://x.com) Default: `null`. filter by is\_internal (internal vs external hosts) Default: `null`. filter by is\_regression Default: `null`. Return the records that have issue trackers. Default: `null`. filter by comma separated labels e.g labels=p1,p2 Default: `null`. number of results to get Default: `null`. number of results to skip Default: `null`. comma separated ports e.g. ports=80,443 Default: `null`. search term Default: `null`. string separated by comma e.g. info,high. Defaults to unknown,low,medium,high,critical. Default: `null`. comma separated ascending sorting e.g sort\_asc=created\_at,severity Default: `null`. comma separated descending sorting e.g sort\_desc=created\_at,severity Default: `null`. comma separated tags e.g tags=xss,cve Default: `null`. Retrieve the Team ID from: [https://cloud.projectdiscovery.io/settings/team](https://cloud.projectdiscovery.io/settings/team) Default: `null`. comma separated templates e.g. templates=tech-detect,azure-takeover Default: `null`. filter by time ( last\_day, last\_week, last\_month ) Default: `null`. comma separated vuln\_status e.g vuln\_status=open,fixed Default: `null`. ## List scans Action ID: `tools.project_discovery.list_scans` List vulnerability scans. Calls GET /v1/scans directly. Reference: [https://docs.projectdiscovery.io/api-reference/scans/get-scan-list](https://docs.projectdiscovery.io/api-reference/scans/get-scan-list) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields ProjectDiscovery Cloud API base URL. Default: `null`. filter by internal scans Default: `null`. number of scan-status results to fetch Default: `null`. number of scan-status results to skip Default: `null`. search term for running scans Default: `null`. comma separated ascending sorting e.g sort\_asc=created\_at,severity Default: `null`. comma separated descending sorting e.g sort\_desc=created\_at,severity Default: `null`. filter by status (failed, finished, queued, running, starting, uploaded, scheduled) Default: `null`. Retrieve the Team ID from: [https://cloud.projectdiscovery.io/settings/team](https://cloud.projectdiscovery.io/settings/team) Default: `null`. ## List vulnerability changelogs Action ID: `tools.project_discovery.list_vulnerability_changelogs` List vulnerability changelogs. Calls GET /v1/scans/vuln/changelogs directly. Reference: [https://docs.projectdiscovery.io/api-reference/results/get-all-vulnerability-changelogs](https://docs.projectdiscovery.io/api-reference/results/get-all-vulnerability-changelogs) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields ProjectDiscovery Cloud API base URL. Default: `null`. comma separated event\_type e.g. event\_type=vul\_status,vul\_status\_change Default: `null`. number of results to get Default: `null`. number of results to skip Default: `null`. comma separated ascending sorting e.g sort\_asc=created\_at,severity Default: `null`. comma separated descending sorting e.g sort\_desc=created\_at,severity Default: `null`. Retrieve the Team ID from: [https://cloud.projectdiscovery.io/settings/team](https://cloud.projectdiscovery.io/settings/team) Default: `null`. time filter to select (last\_day, last\_week, last\_month, last\_3\_months, last\_6\_months, last\_12\_months, all\_time). Defaults to all\_time. Default: `null`. ## Rescan enumeration Action ID: `tools.project_discovery.rescan_enumeration` Rescan an enumeration. Calls POST /v1/asset/enumerate/\{enumerate\_id}/rescan directly. Reference: [https://docs.projectdiscovery.io/api-reference/enumerations/rescan-enumeration](https://docs.projectdiscovery.io/api-reference/enumerations/rescan-enumeration) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields Enumeration ID to rescan. ProjectDiscovery Cloud API base URL. Default: `null`. Retrieve the Team ID from: [https://cloud.projectdiscovery.io/settings/team](https://cloud.projectdiscovery.io/settings/team) Default: `null`. ## Rescan scan Action ID: `tools.project_discovery.rescan_scan` Rescan a vulnerability scan. Calls POST /v1/scans/\{scan\_id}/rescan directly. Reference: [https://docs.projectdiscovery.io/api-reference/scans/rescan-scan](https://docs.projectdiscovery.io/api-reference/scans/rescan-scan) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields Scan ID to rescan. ProjectDiscovery Cloud API base URL. Default: `null`. Retrieve the Team ID from: [https://cloud.projectdiscovery.io/settings/team](https://cloud.projectdiscovery.io/settings/team) Default: `null`. ## Search vulnerabilities Action ID: `tools.project_discovery.search_vulnerabilities` Search vulnerability findings. Calls GET /v2/vulnerability/search directly. Reference: [https://docs.projectdiscovery.io/api-reference/full-text-search](https://docs.projectdiscovery.io/api-reference/full-text-search) ### Secrets Required secrets: * `project_discovery`: required values `PDCP_API_KEY`. ### Input fields ProjectDiscovery Cloud API base URL. Default: `null`. Number of facets to return. Default: `null`. List of fields to return (comma separated). Default: `null`. Whether to highlight the search results. Default: `null`. The numbers of items to return. Default: `null`. The numbers of items to skip. Default: `null`. Search query. Default: `null`. List of range facet fields (comma separated). Default: `null`. Sort results in ascending order (CSV field names). Default: `null`. Sort results in descending order (CSV field names). Default: `null`. List of term facet fields (comma separated). Default: `null`.