# Get the outside view

`GET /app/assets/{id}/outside-view/{part}`

What anyone can see of the asset without scanning it, read live and never stored: web (the site's headers and certificate), email (SPF, DMARC, DKIM, MX), dns, or subdomains (from certificate transparency logs). At most 120 a minute per workspace. Also limited per workspace: 120 a minute.

Scope: `assets:read`.

## Parameters

- `id` (path, integer, required)
- `part` (path, string, required) One of: `web`, `email`, `dns`, `subdomains`.

## Example

```bash
curl -X GET "https://api.fortwatch.ai/app/assets/42/outside-view/web" \
  -H "Authorization: Bearer $FORTWATCH_API_KEY"
```

## Response 200

The request succeeded.

- `part` (string, required) One of: `web`, `email`, `dns`, `subdomains`.
- `host` (string, required)
- `checkedAt` (string (date-time), required)
- `status` (string, required) One of: `ok`, `unreachable`, `unavailable`.
- `items` (object[], required)
  - `severity` (string, required)
  - `templateId` (string, required)
  - `name` (string, required)
  - `description` (string | null, required)
  - `remediation` (string | null, required)
- `facts` (object, required): What the part read: the page and its certificate, the mail records, the DNS records, or the subdomain count and a sample

```json
{
  "part": "web",
  "host": "app.example.com",
  "checkedAt": "2026-10-16T12:00:00.000Z",
  "status": "ok",
  "items": [
    {
      "severity": "string",
      "templateId": "string",
      "name": "Production",
      "description": "string",
      "remediation": "string"
    }
  ],
  "facts": {}
}
```

## Errors

- 400: The request is not valid: a field is missing or has the wrong shape (the message names it).
- 401: No valid credentials: the API key or access token is missing, revoked or expired (INVALID_API_KEY, INVALID_TOKEN).
- 403: Not allowed: the key or token lacks this scope (SCOPE_REQUIRED), the route is dashboard-only (SESSION_REQUIRED), or a plan limit applies.
- 404: Not found in your workspace.
- 429: Too many requests (RATE_LIMITED): wait the seconds Retry-After gives.