Skip to main content
GET
List workspace vulnerability findings
Required permissions: alert.read. Personal keys are capped by their owner’s current team role. See request conventions and automation workflows. MCP clients use the task-oriented tool catalogue.

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Query Parameters

appId
string<uuid>
Pattern: ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$
limit
integer
default:20
Required range: 1 <= x <= 50
page
integer
default:1
Required range: 1 <= x <= 10000
severity
enum<string>
default:all
Available options:
all,
critical,
high,
medium,
low,
unknown

Response

Paginated advisories from the latest scanned image of each App, ranked by severity with app, source, and server identity, plus workspace severity totals. Resources are not image-scanned.

findings
object[]
required
nextPage
null | number
required
page
number
required
summary
object
required
localization
object
required
Last modified on September 10, 2026