List findings
One row per finding: a vulnerability in one project across every scan that detected it, with its triage state and its newest detection. Newest first by when each finding was first detected; ties break on id so pages are stable. Returns 404 until the account’s finding index is complete.
Authorizations
API key for authentication API tokens belonging to inactive users are rejected.
Query Parameters
Comma-separated families. Default: every security family the token may view (all but code_quality). Naming a family the token may not view returns 403.
"sast,dependency"
Comma-separated statuses.
"open,fix_in_progress"
Comma-separated urgencies.
"CR,HI"
Comma-separated project ids.
"12,15"
One project name.
Substring of the repository URL.
Comma-separated CWE ids, as CWE-79 or 79.
"CWE-79,CWE-89"
active: the finding has a detection in its project (default). retired: its last detection was deleted with its scan or project. all: both.
active, retired, all ISO 8601 datetime, or a date read as midnight UTC. Findings whose triage changed after this instant; use it for incremental sync.
"2026-10-01T00:00:00Z"
ISO 8601 datetime, or a date read as midnight UTC. Findings first detected after this instant.
"2026-10-01T00:00:00Z"
One user id.
Sort order. created_at is when the finding was first detected, the instant created_since filters on; it is not in the response, and equals first_detection_date unless the finding's oldest detections were deleted with their scan. Ties break on id.
-created_at, created_at, urgency, -urgency, status, -status, status_changed_at, -status_changed_at The page number for pagination
The number of results per page
x <= 100