Reachability flow via Hosted Agent
If your target API is internal or not reachable from the public internet, you'll likely need a Hosted Agent to scan it. See Do I Need a Hosted Agent? to decide, then follow the Hosted Agent quickstart to deploy one.
Create Application
-
Open your browser and visit: https://<your-tenant>.apisecapps.com
-
Click Add Application.

-
Select OpenAPI Spec.

-
Enter the Name for the application, click Browse Files, and upload the document.

-
Click the Continue button to create the application.

-
Click Onboard.

-
The application creation process displays.

-
Once the application is created, check the reachability status of the instance URL. The status displays as "Unreachable" because the API is behind the firewall.

-
To establish reachability, click Test Reachability under Setup Application Reachability in App Model.

-
The Test reachability process runs.

-
The Test Reachability result displays.
-
The result shows that the given instance URL is not reachable, with an option to create a private hosted agent.
-
Click private hosted agent.

-
You are redirected to the Hosted Agent window.

-
Click the New Hosted Agent button to create a hosted agent.

-
The Setup Hosted Agents window opens.

-
Enter the hosted agent name and click the Create Hosted Agent button.

-
Select the desired environment type and click Download Installation Instructions to download the instructions required to configure the hosted agent.

-
The final step of Setup Hosted Agents displays the Finish button. Click Finish.

-
In the Hosted Agent window, the newly created hosted agent displays with the status "PROVISIONED".

-
After you install the hosted agent in your environment, the status changes to "ACTIVE".

-
Revisit the application and check the reachability status. It now displays as "Reachable".
