FortWatchFortWatchDocs
Menu

List a scan's issues

GEThttps://api.fortwatch.ai/app/scans/{id}/issues
Scope scans:readPagedOperation ID listScanIssues

Issues with at least one finding from this scan.

Paged: send page and limit (100 by default, at most 500); the total is in X-Total-Count (paging).

Parameters

NameInTypeDescription
idrequiredpathinteger
pagequeryintegerThe page, from 1.
limitqueryintegerRows per page: an API key or OAuth token gets 100 when it sends none, at most 500.

Example request

curl -X GET "https://api.fortwatch.ai/app/scans/42/issues?limit=100" \
  -H "Authorization: Bearer $FORTWATCH_API_KEY"

Response 200

The request succeeded.

FieldTypeDescription
idrequirednumber
titlerequiredstring
severityrequiredstring
statusrequiredstring
createdAtrequiredstring (date-time)
updatedAtrequiredstring (date-time)
assigneerequiredobject
firstNamerequiredstring
lastNamerequiredstring
_countrequiredobject
foundAtrequiredstring (date-time)
fixedAtrequiredstring (date-time) | null
daysToFixrequiredobject | null
foundInScanIdrequiredobject | null
json
[
  {
    "id": 42,
    "title": "string",
    "severity": "string",
    "status": "string",
    "createdAt": "2026-10-16T12:00:00.000Z",
    "updatedAt": "2026-10-16T12:00:00.000Z",
    "assignee": {
      "firstName": "string",
      "lastName": "string"
    },
    "_count": {},
    "foundAt": "2026-10-16T12:00:00.000Z",
    "fixedAt": "2026-10-16T12:00:00.000Z",
    "daysToFix": {},
    "foundInScanId": {}
  }
]

Errors

400The request is not valid: a field is missing or has the wrong shape (the message names it).
401No valid credentials: the API key or access token is missing, revoked or expired (INVALID_API_KEY, INVALID_TOKEN).
403Not allowed: the key or token lacks this scope (SCOPE_REQUIRED), the route is dashboard-only (SESSION_REQUIRED), or a plan limit applies.
404Not found in your workspace.
429Too many requests (RATE_LIMITED): wait the seconds Retry-After gives.