{"q":"scan","count":10,"hits":[{"title":"Scan API","url":"https://docs.aevral.com/docs/scan-api","mdUrl":"https://docs.aevral.com/docs/scan-api.md","description":"POST /v1/scans starts a whole-repo scan and GET /v1/scans/:id reads it. Authentication with an aevr_ key from AEVRAL_API_KEY, request fields, responses, the polling contract, idempotency, and the error codes with the action a coding agent should take.","score":9,"snippet":"A key starts and reads scans for its own organization only. It cannot authorize an overage charge, buy a plan or raise a spend cap: those stay "},{"title":"What a scan looks like","url":"https://docs.aevral.com/docs/what-a-scan-looks-like","mdUrl":"https://docs.aevral.com/docs/what-a-scan-looks-like.md","description":"The whole-repo scan: press Scan in the console, get a GitHub Check, a console report, and a suggested fix.","score":9,"snippet":"The whole-repo scan is the first Aevral product. One scan covers your repository's default branch: cross-file context, authorization ru"},{"title":"Changelog","url":"https://docs.aevral.com/docs/changelog","mdUrl":"https://docs.aevral.com/docs/changelog.md","description":"What has shipped in Aevral: pull request reviews, repository scans, and the console.","score":4,"snippet":"ed on request. - **A documented API for scans and usage.** Organizations mint `aevr_` keys from the console Developer API page (shown once), start and read whol"},{"title":"Console and API keys","url":"https://docs.aevral.com/docs/console-and-api-keys","mdUrl":"https://docs.aevral.com/docs/console-and-api-keys.md","description":"The Aevral console is where your install connects after GitHub sign-in, and where you press Scan, read reports, manage PR review per organization, and manage billing and Developer API keys. Self-serve is live.","score":4,"snippet":" in. Free organizations get two private scans in 14 days. ## What the console is for The console is the operating surface of the scan product: - **Authorize "},{"title":"The findings worklist","url":"https://docs.aevral.com/docs/findings-worklist","mdUrl":"https://docs.aevral.com/docs/findings-worklist.md","description":"A per-repository list of scan leads across scans, with occurrence history, a human archive, and a fix prompt bound to one SHA.","score":4,"snippet":"ith GitHub and the install connects. A scan report is one snapshot at one commit. The findings worklist is the remembered list of those leads for a repository:"},{"title":"How Aevral hunts","url":"https://docs.aevral.com/docs/how-aevral-hunts","mdUrl":"https://docs.aevral.com/docs/how-aevral-hunts.md","description":"How Aevral hunts: the scan method behind the security review and one abridged prompt excerpt. Aevral is not open source; the engine, the corpus, and the judge stay private.","score":4,"snippet":" what the product does (that is [What a scan looks like](/docs/what-a-scan-looks-like)), and how the security review actually reaches its findings. This page is"},{"title":"Aevral docs","url":"https://docs.aevral.com/docs","mdUrl":"https://docs.aevral.com/docs.md","description":"Aevral is an AI security reviewer for GitHub pull requests. Built by Better ISMS, the company behind ISMS Copilot, in Paris, France. Whole-repo scans read authorization, IDOR, and business-logic access control only.","score":4,"snippet":"aid review allowances are separate from scan plans. 2. **Scan the repository you already have.** Scans read authorization, IDOR, and business-logic access contr"},{"title":"Pricing and plans","url":"https://docs.aevral.com/docs/pricing-and-plans","mdUrl":"https://docs.aevral.com/docs/pricing-and-plans.md","description":"Both Aevral products: PR security review (USD per organization, no scan plan required) and the whole-repo scan plans (USD per organization). Verified against the billing implementation and the console Billing page.","score":4,"snippet":"ans are live in the console. Whole-repo scans are priced in USD with included scans per month. One GitHub App and one console for both. Neither product requires"},{"title":"Set up with your agent","url":"https://docs.aevral.com/docs/setup-with-an-agent","mdUrl":"https://docs.aevral.com/docs/setup-with-an-agent.md","description":"Install Aevral in two GitHub steps. The console connects the matching install. Reviews can start on the next pull request. Then you can scan. Agents read this page. Humans click.","score":4,"snippet":"ganization and repository. A whole-repo scan is the second action, only if they ask. If those are missing, say Connection not verified. Never say you installed "},{"title":"Usage API","url":"https://docs.aevral.com/docs/usage-api","mdUrl":"https://docs.aevral.com/docs/usage-api.md","description":"GET /v1/usage returns where an Aevral organization stands: PR review plan, usage and cap, scan status, and, for PR review, a link an owner or admin opens to subscribe or upgrade. Read-only. An agent cannot buy or change a plan.","score":4,"snippet":"er organization and never count against scan quota. ## Response ```json { \"org_id\": \"<org uuid>\", \"pr\": { \"state\": \"free\", \"plan\": null, \"used"}],"note":"English public docs only. Prefer hit.mdUrl for clean body text."}