# Alibaba Cloud Agentic BAS API

> Alibaba Cloud Agentic BAS API on Apizie: 5 endpoints (Creates penetration testing tasks for verified assets under the current account and returns the task list…, Queries the PDF report of a specified penetration test task under the current account and returns a…, Queries penetration test tasks for the current account by paging and returns information such as the task…, Queries penetration test vulnerabilities for the current account by task ID with paging. Returns…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/cloud:aliyun-agenticbas/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:aliyun-agenticbas`
- Category: Cloud
- Status: byok
- Source: https://api.alibabacloud.com/product/agenticbas
- Page: https://apizie.tech/api/cloud/aliyun-agenticbas
- OpenAPI: https://apizie.tech/api/cloud/aliyun-agenticbas/openapi.json

Alibaba Cloud OpenAPI for Agentic BAS (agenticbas, version 2026-06-30). Calls are signed with ACS3-HMAC-SHA256 using your AccessKey ID and secret.

## Endpoints

### Creates penetration testing tasks for verified assets under the current account and returns the task list…
`POST https://apizie.tech/v1/cloud:aliyun-agenticbas/create-pentest-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://agenticbas.ap-southeast-1.aliyuncs.com |
| OperationType | string | no | Not exposed in the SDK. A fixed operation identifier defined by the system. The value for this operation is createPentestTask. You do not… |
| OperationInput | string | yes | The business parameter object for the operation, passed in JSON format. This object and its required fields must be provided (JSON-encoded) |

### Queries the PDF report of a specified penetration test task under the current account and returns a…
`POST https://apizie.tech/v1/cloud:aliyun-agenticbas/describe-pentest-report-content` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://agenticbas.ap-southeast-1.aliyuncs.com |
| OperationType | string | no | The fixed operation identifier defined by the system. The value for this operation is getPentestReportContent. You do not need to pass in… |
| OperationInput | string | yes | The business parameter object for the operation, passed in JSON format. This object and its required fields must be provided (JSON-encoded) |

### Queries penetration test tasks for the current account by paging and returns information such as the task…
`POST https://apizie.tech/v1/cloud:aliyun-agenticbas/describe-pentest-task-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://agenticbas.ap-southeast-1.aliyuncs.com |
| OperationType | string | no | Not exposed in the SDK. The fixed operation identifier assigned by the system. The value for this operation is listPentestTask. You do not… |
| OperationInput | string | no | The business parameter object for the operation, specified in JSON format. This parameter is optional. If you do not specify this… |

### Queries penetration test vulnerabilities for the current account by task ID with paging. Returns…
`POST https://apizie.tech/v1/cloud:aliyun-agenticbas/describe-pentest-vuln-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://agenticbas.ap-southeast-1.aliyuncs.com |
| OperationType | string | no | Not exposed in the SDK. A fixed operation identifier defined by the system. The value for this operation is listPentestVuln. You do not… |
| OperationInput | string | yes | The business parameter object for the operation, passed in JSON format. You must provide this object and all required fields within it… |

### version
`POST https://apizie.tech/v1/cloud:aliyun-agenticbas/version` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://agenticbas.ap-southeast-1.aliyuncs.com |

## Example
```
curl "https://apizie.tech/v1/cloud:aliyun-agenticbas/create-pentest-task" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Alibaba Cloud Agentic BAS API?
Create a free Apizie key, then send POST https://apizie.tech/v1/cloud:aliyun-agenticbas/create-pentest-task with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Alibaba Cloud Agentic BAS API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Alibaba Cloud Agentic BAS itself also needs your own key from aliyuncs.com.

### Can AI agents use the Alibaba Cloud Agentic BAS API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:aliyun-agenticbas.

### What is the status of the Alibaba Cloud Agentic BAS API?
Needs your own provider key (bring your own key)