vector_store_scanner__scan_endpoint
Probe vector database endpoints for unauthenticated exposure, fingerprinting Weaviate, Qdrant, Chroma, Elasticsearch, Redis, and Postgres/pgvector and listing exposed schemas or data read-only.
Instructions
Probe a vector-database (or vector-index-capable) endpoint for unauthenticated exposure — Weaviate, Qdrant, Chroma, Elasticsearch/OpenSearch (HTTP fingerprinting, escalating from instance info → collection/schema listing → actual stored data), Redis (RESP PING without AUTH), and Postgres/pgvector (wire-protocol SSLRequest + StartupMessage handshake, no real credentials sent). Read-only — never writes or authenticates with real credentials.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tls | No | Use https:// for HTTP-based probes (Weaviate/Qdrant/Chroma/Elasticsearch). Default: false | |
| host | Yes | Hostname or IP of the endpoint to probe | |
| port | No | Port to probe (defaults to the store type's conventional port, e.g. 6333 for Qdrant) | |
| type | No | Store type to probe for. 'auto' (default) fingerprints the endpoint by trying each known type in turn. | |
| timeoutMs | No | Per-request timeout in milliseconds (default: 4000) |