List findings

GEThttps://api.fortwatch.ai/app/findings

Scope issues:readPagedOperation ID listFindings

Everything the scanners found across the workspace; info findings are left out unless asked for. Filter by scan, severity, asset, project, scanner or issue status.

Paged: send page and limit (100 by default, at most 500); the total is in X-Total-Count (paging).

Parameters

Name	In	Type
`scanId`	query	integer
`includeInfo`	query	string
`severity`	query	string
`assetId`	query	integer
`projectId`	query	integer
`scanner`	query	string
`issueStatus`	query	string
`includeInactive`	query	string
`page`	query	number
`limit`	query	number

Example request

curl -X GET "https://api.fortwatch.ai/app/findings?limit=100" \
  -H "Authorization: Bearer $FORTWATCH_API_KEY"

Response 200

The request succeeded.

Field	Type	Description
`id`required	number
`scanId`required	number \| null
`investigationId`required	number \| null
`scanner`required	string
`severity`required	string
`templateId`required	string
`name`required	string
`description`required	string \| null
`matchedAt`required	string \| null
`tags`required	string \| null
`cveIds`required	string \| null
`reference`required	string \| null
`remediation`required	string \| null
`cvssScore`required	number \| null
`cvssMetrics`required	string \| null
`rawJson`required	object \| null
`issueId`required	number \| null
`createdAt`required	string (date-time)
`scan`required	object
`id`required	number
`assetId`required	number
`status`required	string
`triggeredBy`required	string
`triggeredByUserId`required	number \| null
`failureCode`required	string \| null
`failureDetail`required	string \| null
`scannerIp`required	string \| null
`startedAt`required	string (date-time) \| null
`completedAt`required	string (date-time) \| null
`createdAt`required	string (date-time)
`updatedAt`required	string (date-time)
`asset`required	object
`id`required	number
`name`required	object \| null
`value`required	string
`type`required	string
`project`required	object
`issue`required	object
`id`required	number
`status`required	string
`title`required	string
`category`required	string

json

[
  {
    "id": 42,
    "scanId": 42,
    "investigationId": 42,
    "scanner": "string",
    "severity": "string",
    "templateId": "string",
    "name": "Production",
    "description": "string",
    "matchedAt": "string",
    "tags": "string",
    "cveIds": "string",
    "reference": "string",
    "remediation": "string",
    "cvssScore": 1,
    "cvssMetrics": "string",
    "rawJson": {},
    "issueId": 42,
    "createdAt": "2026-10-16T12:00:00.000Z",
    "scan": {
      "id": 42,
      "assetId": 42,
      "status": "string",
      "triggeredBy": "string",
      "triggeredByUserId": 42,
      "failureCode": "string",
      "failureDetail": "string",
      "scannerIp": "string",
      "startedAt": "2026-10-16T12:00:00.000Z",
      "completedAt": "2026-10-16T12:00:00.000Z",
      "createdAt": "2026-10-16T12:00:00.000Z",
      "updatedAt": "2026-10-16T12:00:00.000Z",
      "asset": {
        "id": null,
        "name": {},
        "value": null,
        "type": null,
        "project": {}
      }
    },
    "issue": {
      "id": 42,
      "status": "string",
      "title": "string"
    },
    "category": "string"
  }
]

Errors

`400`	The request is not valid: a field is missing or has the wrong shape (the message names it).
`401`	No valid credentials: the API key or access token is missing, revoked or expired (INVALID_API_KEY, INVALID_TOKEN).
`403`	Not allowed: the key or token lacks this scope (SCOPE_REQUIRED), the route is dashboard-only (SESSION_REQUIRED), or a plan limit applies.
`429`	Too many requests (RATE_LIMITED): wait the seconds Retry-After gives.

Every code is explained in Errors.

This page as Markdown