Skip to main content
GET
Lists the tags a shared user’s role has been granted visibility into, on api.scanova.io, authenticated with your raw API key.
Not paginated — returns a plain array.

Only meaningful for a shared user’s key

This endpoint only makes sense for an API key created on behalf of a shared user whose account has tag-based permission scoping enabled. A key belonging to the account owner (who isn’t scoped by tags in the first place) returns 400 with {"error": ["Request user is not a shared user"]}.

Authorizations

Authorization
string
header
required

Send your Management API key as the raw value of the Authorization header — no "Bearer " or "Token " prefix, and no other characters. Example: Authorization: YOUR_API_KEY. A header containing more than one space-separated part is rejected outright. Requests also require the request's Host header to be the management API host (e.g. api.scanova.io) — the same key sent to the regular API host will not authenticate.

Response

Tags visible to this shared user. Not paginated.