List issues

GEThttps://api.fortwatch.ai/app/issues

Scope issues:readOperation ID listIssues

Issues, one per kind of problem and asset, with the asset, assignee, status, severity, reachability and SLA. Filter by status, severity, category, asset, project, reachability or text, and sort. Paged in the body (issues, total, page, limit): 100 by default, at most 500.

Parameters

Name	In	Type
`status`	query	string
`severity`	query	string
`category`	query	string
`assetId`	query	integer
`projectId`	query	integer
`reachability`	query	string
`q`	query	string
`sort`	query	string
`page`	query	number
`limit`	query	number

Example request

curl -X GET "https://api.fortwatch.ai/app/issues" \
  -H "Authorization: Bearer $FORTWATCH_API_KEY"

Response 200

The request succeeded.

Field	Type	Description
`issues`required	object[]
`id`required	number
`workspaceId`required	number
`assetId`required	number
`title`required	string
`description`required	string \| null
`severity`required	string
`status`required	string
`templateId`required	string \| null
`dedupKey`required	string
`assignedTo`required	number \| null
`resolution`required	string \| null
`resolvedBy`required	string \| null
`resolvedByScanId`required	number \| null
`resolvedByUserId`required	number \| null
`dismissedByUserId`required	number \| null
`category`required	string
`dueDate`required	string (date-time) \| null
`resolvedAt`required	string (date-time) \| null
`lastReopenedAt`required	string (date-time) \| null
`dismissReason`required	string \| null
`dismissNotes`required	string \| null
`dismissExpiresAt`required	string (date-time) \| null
`firstSeenAt`required	string (date-time)
`lastSeenAt`required	string (date-time)
`lastCheckedAt`required	string (date-time) \| null
`reachability`required	string
`verificationScanId`required	number \| null
`verificationSkipped`required	string \| null
`createdAt`required	string (date-time)
`updatedAt`required	string (date-time)
`assignee`required	object
`firstName`required	string
`lastName`required	string
`resolvedByUser`required	object
`firstName`required	string
`lastName`required	string
`dismissedByUser`required	object
`firstName`required	string
`lastName`required	string
`asset`required	object
`id`required	number
`name`required	object \| null
`value`required	string
`type`required	string
`cdnProvider`required	object \| null
`project`required	object
`findings`required	object[]
`scanner`required	string
`remediation`required	object \| null
`reference`required	object \| null
`matchedAt`required	object \| null
`scanId`required	object \| null
`name`required	string
`templateId`required	object \| null
`_count`required	object
`findings`required	number
`seenInLatestScan`required	boolean
`proof`required	object \| null
`reproduce`required	object \| null
`vantage`required	object \| null
`verification`required	object
`status`required	string	One of: `queued`, `running`, `done`, `failed`, `skipped`
`scanId`required	number \| null
`reason`required	string \| null	Why no re-check started: limit, asset_not_active, ownership_unverified, error
`nextScheduledAt`required	string (date-time) \| null	The asset's next scheduled scan, when no re-check started
`total`required	number
`page`required	number
`limit`required	number
`counts`required	object
`current`required	number
`fixed`required	number
`dismissed`required	number
`total`required	number
`byStatus`required	object
`open`required	number
`in_progress`required	number
`resolved`required	number
`dismissed`required	number
`severityBreakdown`required	object
`slaTargets`required	object
`critical`required	number
`high`required	number
`medium`required	number
`low`required	number

json

{
  "issues": [
    {
      "id": 42,
      "workspaceId": 42,
      "assetId": 42,
      "title": "string",
      "description": "string",
      "severity": "string",
      "status": "string",
      "templateId": "string",
      "dedupKey": "string",
      "assignedTo": 1,
      "resolution": "string",
      "resolvedBy": "string",
      "resolvedByScanId": 42,
      "resolvedByUserId": 42,
      "dismissedByUserId": 42,
      "category": "string",
      "dueDate": "2026-10-16T12:00:00.000Z",
      "resolvedAt": "2026-10-16T12:00:00.000Z",
      "lastReopenedAt": "2026-10-16T12:00:00.000Z",
      "dismissReason": "string",
      "dismissNotes": "string",
      "dismissExpiresAt": "2026-10-16T12:00:00.000Z",
      "firstSeenAt": "2026-10-16T12:00:00.000Z",
      "lastSeenAt": "2026-10-16T12:00:00.000Z",
      "lastCheckedAt": "2026-10-16T12:00:00.000Z",
      "reachability": "string",
      "verificationScanId": 42,
      "verificationSkipped": "string",
      "createdAt": "2026-10-16T12:00:00.000Z",
      "updatedAt": "2026-10-16T12:00:00.000Z",
      "assignee": {
        "firstName": null,
        "lastName": null
      },
      "resolvedByUser": {
        "firstName": null,
        "lastName": null
      },
      "dismissedByUser": {
        "firstName": null,
        "lastName": null
      },
      "asset": {
        "id": null,
        "name": {},
        "value": null,
        "type": null,
        "cdnProvider": {},
        "project": {}
      },
      "findings": [
        {}
      ],
      "_count": {
        "findings": null
      },
      "seenInLatestScan": true,
      "proof": {},
      "reproduce": {},
      "vantage": {},
      "verification": {
        "status": "queued",
        "scanId": null,
        "reason": null,
        "nextScheduledAt": null
      }
    }
  ],
  "total": 1,
  "page": 1,
  "limit": 1,
  "counts": {
    "current": 1,
    "fixed": 1,
    "dismissed": 1,
    "total": 1,
    "byStatus": {
      "open": 1,
      "in_progress": 1,
      "resolved": 1,
      "dismissed": 1
    }
  },
  "severityBreakdown": {},
  "slaTargets": {
    "critical": 1,
    "high": 1,
    "medium": 1,
    "low": 1
  }
}

Errors

`400`	The request is not valid: a field is missing or has the wrong shape (the message names it).
`401`	No valid credentials: the API key or access token is missing, revoked or expired (INVALID_API_KEY, INVALID_TOKEN).
`403`	Not allowed: the key or token lacks this scope (SCOPE_REQUIRED), the route is dashboard-only (SESSION_REQUIRED), or a plan limit applies.
`429`	Too many requests (RATE_LIMITED): wait the seconds Retry-After gives.

Every code is explained in Errors.

This page as Markdown