FortWatchFortWatchDocs
Menu

Get the outside view

GEThttps://api.fortwatch.ai/app/assets/{id}/outside-view/{part}
Scope assets:readOperation ID getAssetOutsideView

What anyone can see of the asset without scanning it, read live and never stored: web (the site's headers and certificate), email (SPF, DMARC, DKIM, MX), dns, or subdomains (from certificate transparency logs). At most 120 a minute per workspace. Also limited per workspace: 120 a minute.

Parameters

NameInTypeDescription
idrequiredpathinteger
partrequiredpathstringOne of: web, email, dns, subdomains

Example request

curl -X GET "https://api.fortwatch.ai/app/assets/42/outside-view/web" \
  -H "Authorization: Bearer $FORTWATCH_API_KEY"

Response 200

The request succeeded.

FieldTypeDescription
partrequiredstringOne of: web, email, dns, subdomains
hostrequiredstring
checkedAtrequiredstring (date-time)
statusrequiredstringOne of: ok, unreachable, unavailable
itemsrequiredobject[]
severityrequiredstring
templateIdrequiredstring
namerequiredstring
descriptionrequiredstring | null
remediationrequiredstring | null
factsrequiredobjectWhat the part read: the page and its certificate, the mail records, the DNS records, or the subdomain count and a sample
json
{
  "part": "web",
  "host": "app.example.com",
  "checkedAt": "2026-10-16T12:00:00.000Z",
  "status": "ok",
  "items": [
    {
      "severity": "string",
      "templateId": "string",
      "name": "Production",
      "description": "string",
      "remediation": "string"
    }
  ],
  "facts": {}
}

Errors

400The request is not valid: a field is missing or has the wrong shape (the message names it).
401No valid credentials: the API key or access token is missing, revoked or expired (INVALID_API_KEY, INVALID_TOKEN).
403Not allowed: the key or token lacks this scope (SCOPE_REQUIRED), the route is dashboard-only (SESSION_REQUIRED), or a plan limit applies.
404Not found in your workspace.
429Too many requests (RATE_LIMITED): wait the seconds Retry-After gives.