---
title: "FedRAMP DAST report (OSCAL)"
method: GET
path: "/report/oscal-dast"
---

# FedRAMP DAST report (OSCAL)

`GET /report/oscal-dast`

## Request

- Base URL: `https://app.aikido.dev/api/public/v1`
- URL: `https://app.aikido.dev/api/public/v1/report/oscal-dast`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://app.aikido.io/api/oauth/token` scopes: `reports:read`

Returns the 'Domains & API - FedRAMP report' as an OSCAL v1.1.2 assessment-results (SAR) document, covering all domains and APIs monitored by surface monitoring. This endpoint is available on all paid plans.

## Response `200`

An OSCAL v1.1.2 assessment-results document

- object
  - `assessment-results` object
    - `uuid` string
    - `metadata` object
    - `import-ap` object
    - `local-definitions` object
    - `results` object[]

## Other responses

- `400`: The report cannot be built because one or more domains are missing data (for example a domain that has never been scanned)

---

[API](https://skmtc.dev/aikido/apis/aikido-security-api-documentation.md) - [All operations](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/revisions/da8691338133?raw)