How do I scope a scan to one route?

Use the lightest control that matches how precise you need the run to be. For one-off work, tell Qodex the exact route in chat. For repeatable subsets, use tags. For strict control, run one pre-authored scenario.

Qodex scenario run controls for a focused scenario

Option 1: Tell Qodex in chat

Use this while Qodex is exploring or authoring tests.

Test only POST /api/orders. Skip everything else in the collection.

Run the security skill against /api/v1/users/{id}. Focus on BOLA.

This tells the coordinator and sub-agents to keep the run focused.

Option 2: Use tags

Use tags when the same scope should run again.

Run the scenarios tagged checkout.

curl -X POST \
  https://agents.qodex.ai/api/projects/my-project-slug/webhooks/trigger \
  -H "Authorization: Bearer qk_xxx..." \
  -H "Content-Type: application/json" \
  -d '{"environment":"staging","tags":["checkout"]}'

In the web app, open Test > Scenarios, set the Tags filter, and click Run all. Tags work well for scopes like smoke, checkout, security, critical, or auth.

Option 3: Run one scenario

Use this when you know exactly what should execute. A single pre-authored scenario gives the tightest scope: one route, one test shape, and no extra exploration. Open Test > Scenarios, hover the scenario, and click Run. A whole-target Security scan cannot be narrowed to one route. It covers the verified origin you pick, so use chat or a saved scenario when you need one route.

Which option should I choose?

Need	Best option
One-time route investigation	Chat instruction
Recurring subset of tests	Tags
Exact route and exact assertions	Single scenario

Next steps

API testing scenarios

Learn the API scenario model.

Run a single scenario

Execute one saved test.

Run tag-filtered scenarios

Run a reusable subset.

API governance

Keep endpoint coverage organized.

.qodex.yaml

Testing concepts

Common questions

How do I scope a scan to one route?

How do I scope a scan to one route?

Option 1: Tell Qodex in chat

Option 2: Use tags

Option 3: Run one scenario

Which option should I choose?

Next steps

API testing scenarios

Run a single scenario

Run tag-filtered scenarios

API governance

​How do I scope a scan to one route?

​Option 1: Tell Qodex in chat

​Option 2: Use tags

​Option 3: Run one scenario

​Which option should I choose?

​Next steps

API testing scenarios

Run a single scenario

Run tag-filtered scenarios

API governance

How do I scope a scan to one route?

Option 1: Tell Qodex in chat

Option 2: Use tags

Option 3: Run one scenario

Which option should I choose?

Next steps