---
title: "Get case evidences by case token"
method: GET
path: "/cases/{case_token}/evidences"
tags: ["Cases"]
deprecated: true
---

# Get case evidences by case token

`GET /cases/{case_token}/evidences`

> **Deprecated.**

<Callout type="warning" title="Deprecated Warning">
  This endpoint is deprecated in favor of using Investigations.
</Callout>

Retrieves a list of case evidences uniquely defined by a case token. Case tokens are alphanumeric characters that start with a prefix "C-".

## Path parameters

- `case_token` string, required

## Response `200`

CaseEvidence

- object
  - `status_code` number
  - `error` string
  - `_embedded` object
    - `evidences` object[]
      - `created_at` number — A Unix timestamp, representing when the evidence was created in Alloy's internal system
      - `occurred_at` number — A Unix timestamp, representing when the evidence occurred. For example, this could be a transaction timestamp.
      - `transaction_id` string — A nullable string, representing the identifier for transaction linked to a case
      - `evaluation_token` string — A nullable string, representing the evaluation token linked to an evidence
      - `is_manual` boolean — Indication of if the evidence was added manually by a user
      - `is_portfolio_eval` boolean
      - `portfolio_evaluation_token` string — A nullable string, representing the portfolio evaluation token linked to an evidence
      - `alerts` string[] — The alert(s) that were added as part of this evidence
      - `_embedded` object
        - `transaction` object
          - `transaction_id` number
          - `amount` number
          - `currency_code` string
      - `_links` object
        - `case` Self — unresolved $ref
        - `self` Self — unresolved $ref

---

[API](https://skmtc.dev/alloy/apis/alloy-api.md) · [All operations](https://skmtc.dev/alloy/apis/alloy-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/alloy/alloy-api/revisions/405799de4d2a/schema)