Scan an agent's configuration endpoints to collect information. This tool automatically detects the provider type from the configuration file and retrieves scan endpoints from providers.yaml - a configuration-driven approach. The scan endpoints are defined in providers.yaml for each provider type: - Dify: scan_endpoints: ["/info", "/parameters", "/meta", "/site"] - Coze: scan_endpoints: ["/v1/bots/{{bot_id}}"] - Custom providers: Add your own scan_endpoints in providers.yaml Use this tool to: - Discover agent configuration and metadata - Identify exposed sensitive information (API keys, tokens, credentials) - Enumerate available API endpoints - Collect system information and version details Note: To add scan endpoints for new provider types, update providers.yaml. Optional comma-separated list of specific endpoints to scan. If not provided, uses default endpoints from providers.yaml based on provider type. Example: "/info,/parameters,/meta,/custom-endpoint" JSON string containing the scan results with the following structure: { "provider_type": "string - The detected provider type (dify, coze, etc.)", "base_url": "string - The base URL used for scanning", "total_endpoints": "integer - Total number of endpoints scanned", "successful_scans": "integer - Number of successful endpoint scans", "failed_scans": "integer - Number of failed endpoint scans", "endpoint_results": [ { "endpoint": "string - The endpoint path scanned", "success": "boolean - Whether the scan succeeded", "status_code": "integer - HTTP status code received", "response": "any - Raw response data from the endpoint", "error": "string - Error message if scan failed", "sensitive_findings": ["string - List of detected sensitive information types"] } ], "summary": "string - Human-readable summary of scan results" } Scan a Dify agent (endpoints auto-discovered from providers.yaml) Scan(config_file="/workspace/dify_agent.yaml") Automatically scans: /info, /parameters, /meta, /site (as defined in providers.yaml for dify provider) Scan a Coze agent (endpoints auto-discovered from providers.yaml) Scan(config_file="/workspace/coze_agent.yaml") Automatically scans: /v1/bots/{bot_id} (as defined in providers.yaml for coze provider) Override with custom endpoints Scan(config_file="/workspace/agent.yaml", endpoints="/info,/custom-endpoint")