Sites

What Are Sites?

Sites are Rafter’s live-application security monitoring feature. Instead of scanning your source code (that’s what rafter run / rafter scan do — see CLI Basics), Sites continuously monitor a live, deployed domain for:

Exposed backends and misconfigured services
DNS misconfiguration
SEO issues
Accessibility issues

Your API key starts with RF and should be kept secure. Never commit it to version control (e.g. GitHub). Use environment variables instead.

Sites require an API key with the read-and-scan scope to create sites or trigger scans, or the read scope to list and check them. A read-and-scan key can do both — that scope implies read.

Basic Commands

Make sure you configure an environment variable or pass in your RAFTER_API_KEY with the flag --api-key or -k (more details below).

Register a Site with `rafter sites create`

Registers a site and kicks off its first scan:

rafter sites create https://example.com

Re-Scan a Site with `rafter sites scan`

Accepts either the site’s id (from rafter sites list or rafter sites create) or its URL:

# By project id
rafter sites scan b1b2c3d4-e5f6-7890-abcd-ef1234567890

# By URL
rafter sites scan https://example.com

List Your Sites with `rafter sites list`

rafter sites list

# Paginate
rafter sites list --limit 10 --offset 10

# Include archived sites
rafter sites list --include-archived

Check a Site’s Status with `rafter sites get`

Returns the site’s status, latest run, and a findings summary:

rafter sites get b1b2c3d4-e5f6-7890-abcd-ef1234567890

Command Reference

Command	Description
`rafter sites create <url>`	Register a site and trigger its first scan
`rafter sites scan <projectId-or-url>`	Trigger a re-scan of an existing site
`rafter sites list [--limit] [--offset] [--include-archived]`	List your sites, paginated
`rafter sites get <id>`	Get a site’s status, latest run, and findings summary

All rafter sites commands support:

Flag	Description
`-k`, `--api-key`	Pass your API key directly instead of reading it from `RAFTER_API_KEY`
`-f`, `--format`	Output format: `json` (default) or `md`
`--quiet`	Suppress non-essential output

Output Formats

# JSON (default) — for automation and scripting
rafter sites get <id> --format json

# Markdown — for human-readable reports
rafter sites get <id> --format md

Error Handling

The Sites CLI reads the actual error field from API responses rather than assuming what a status code means — this differs from rafter run’s error handling, which treats every 403 as a quota issue.

Exit Code	Meaning
0	Success
1	General error
2	Not found or not owned (HTTP 404)
3	Rate limited (HTTP 429)
4	Wrong scope or limit reached (HTTP 403)

Example Workflow

# 1. Register a site and kick off its first scan
export RAFTER_API_KEY="RFabc-your-api-key-here"
rafter sites create https://example.com

# 2. Check status until the scan completes
rafter sites get <site-id>

# 3. Re-scan after fixing an issue
rafter sites scan <site-id>

# 4. List all your monitored sites
rafter sites list

API Reference

For the underlying REST API, see the Sites endpoints in the API reference.

Next Steps

CLI Basics

Learn the fundamentals of using the Rafter CLI.

Advanced CLI

Master advanced CLI features and automation.

API Reference

Build custom integrations with the REST API.

CI/CD Integration

Set up automated scanning in your pipelines.

Get Started

CLI Guides

Local Security

References

What Are Sites?

Basic Commands

Register a Site with `rafter sites create`

Re-Scan a Site with `rafter sites scan`

List Your Sites with `rafter sites list`

Check a Site’s Status with `rafter sites get`

Command Reference

Output Formats

Error Handling

Example Workflow

API Reference

Next Steps

CLI Basics

Advanced CLI

API Reference

CI/CD Integration

​What Are Sites?

​Basic Commands

​Register a Site with rafter sites create

​Re-Scan a Site with rafter sites scan

​List Your Sites with rafter sites list

​Check a Site’s Status with rafter sites get

​Command Reference

​Output Formats

​Error Handling

​Example Workflow

​API Reference

​Next Steps

CLI Basics

Advanced CLI

API Reference

CI/CD Integration

What Are Sites?

Basic Commands

Register a Site with `rafter sites create`

Re-Scan a Site with `rafter sites scan`

List Your Sites with `rafter sites list`

Check a Site’s Status with `rafter sites get`

Command Reference

Output Formats

Error Handling

Example Workflow

API Reference

Next Steps