Initiates an on-demand CIS compliance scan for all resources in the specified custom group. Subject to a cooling period between consecutive scan operations
post /dcapi/scap/compliance/initiateComplianceScan
https://{server-hostname}:8383/dcapi/scap/compliance/initiateComplianceScan
VulnerabilityMgmt.CREATECopied!
Authorization: d92d4xxxxxxxxxxxxx15f52
curl --request POST \
--url https://appdomain/dcapi/scap/compliance/initiateComplianceScan \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52'Scan initiation status. inProgress on success, failed on failure
Human-readable status message
Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)
Authentication failure reason
Precondition failed error code. Scan is still in cooling period from a previous scan
Message indicating the remaining cooling period minutes before next scan is allowed
Rate limit error code returned when the API call threshold (configured via threshold/duration in security XML) is exceeded; client is locked out for lock-period minutes
Rate limit exceeded message with retry guidance
Compliance scan initiated successfully
{
"message": "Scan initiated successfully",
"status": "inProgress"
}
Scan initiation failed due to authorization
{
"message": "Not Authorised",
"status": "failed"
}
Scan initiation failed
{
"message": "Scan initiation failed",
"status": "failed"
}
Authentication credentials are missing or invalid
{
"errorMessage": "Authentication required",
"errorCode": "UNAUTHORIZED"
}
Scan is in cooling period from previous scan
{
"errorMessage": "All managed system(s) are currently being scanned. Retry scanning system(s) after 5 minute(s).",
"errorCode": "COMPLIANCE_SCAN_ALL_FROZEN"
}
API call threshold exceeded
{
"errorMessage": "Rate limit exceeded. Retry after some time",
"errorCode": "TOO_MANY_REQUESTS"
}
![]()
Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.