COconductorone
Findings

Search

Changed on

Search findings using full-text query and filters for severity, state, type, and app. Each Finding row is large (risk factors, evidence, target, tags) — request a small page_size (≤10) to keep responses small.

post/api/v1/findings/search

Request

  • Base URL
    https://example.conductor.one
  • URL
    https://example.conductor.one/api/v1/findings/search
  • Auth
    HTTP bearer and OAuth 2
    Client credentials
    Token URL: /auth/v1/token

Request body

appIdsstring[] nullable

Filter by app IDs (OR within field).

appResourceIdsstring[] nullable

Filter by app resource IDs (OR within field). Matches findings whose target.app_resource_target.app_resource_id is in this list. An app resource is app-scoped, so pair with app_ids (and app_resource_type_ids) to hit the composite (tenant_id, app_id, app_resource_type_id, app_resource_id) index.

appResourceTraitIdsstring[] nullable

Filter to findings whose target resource's type carries any of these traits (e.g. the builtin agent / secret trait ids). OR within field; empty = not applied.

appResourceTypeIdsstring[] nullable

Filter by app resource type IDs (OR within field). Matches findings whose target.app_resource_target.app_resource_type_id is in this list.

appUserIdsstring[] nullable

Filter by app user IDs (OR within field). Matches findings whose target.app_user_target.app_user_id is in this list.

appUserTypesstring[] nullable

Filter to findings whose target is an app user of these types (OR within field). Empty = not applied.

assigneeIdentityUserIdsstring[] nullable

Filter by assignee identity-user IDs (OR within field). Matches findings whose assignee_identity_user_id is in this list. The reserved "unassigned" sentinel token selects findings with no assignee; real identity-user IDs are exactly 27 alphanumerics so the token cannot collide.

connectorIdsstring[] nullable

Filter by connector IDs (OR within field). Matches findings whose target.connector_target.connector_id is in this list.

customSubTypesstring[] nullable

Filter by custom sub-type (OR within field). Matches custom findings whose custom_sub_type equals any listed value.

decoyIdsstring[] nullable

Filter by decoy IDs (OR within field). Matches findings whose target.decoy_target.decoy_id is in this list.

edgeIdsstring[] nullable

Filter by Edge IDs (OR within field): Edge findings (FINDING_TYPE_EDGE) raised on any listed Edge. Edge findings carry no app_id, so do not pair this with app_ids. Empty = not applied.

findingTypesstring[] nullable

Filter by finding type (OR within field).

includeUnassignedboolean

When true, includes findings with no assignee. An explicit predicate for direct API callers who prefer a bool over the "unassigned" sentinel in assignee_identity_user_ids; both signals are accepted.

nhiTypesstring[] nullable

Filter to findings whose target resource's nhi_type is one of these (OR within field). Empty = not applied; pass all NhiType values to match any nhi resource.

ownerIdentityUserIdsstring[] nullable

Deprecated: use assignee_identity_user_ids instead.

pageSizeinteger

Maximum number of findings to return per page.

pageTokenstring

Pagination token from a previous response.

querystring

Free text search query.

scopeToAppOwnerboolean

When true, restricts results to findings for apps you own. The caller is resolved from request credentials (no user id is read from the request), so results are always limited to your own apps.

severitiesstring[] nullable

Filter by severities (OR within field).

sourceKindsstring[] nullable

Filter by source kind (OR within field).

statesstring[] nullable

Filter by states (OR within field).

Response

Successful response

nextPageTokenstring

The nextPageToken field.

Changes

  • fe943bedf41bRevision changes
    • info

      added the optional property // to the response with the status

  • 918a4e749f56Revision changes
    • info

      added the new optional request property

    • info

      added the new optional request property

    • info

      request property deprecated

    • info

      added the new FINDING_TYPE_EDGE enum value to the request property /

    • info

      added the new FINDING_TYPE_MCP_GATEWAY_TOOL_CALL_RISK enum value to the request property /

    • info

      added the new FINDING_TYPE_SHADOW_APP enum value to the request property /

    • info

      added the new FINDING_TYPE_SHADOW_MCP enum value to the request property /

    • info

      added the optional property // to the response with the status

    • info

      added the optional property //// to the response with the status

    • info

      added the optional property // to the response with the status

    • info

      added the optional property // to the response with the status

    • info

      added the optional property // to the response with the status

    • info

      added the optional property // to the response with the status

    • info

      added the optional property // to the response with the status

    • info

      added the optional property // to the response with the status

    • info

      added the optional property // to the response with the status

    • info

      added the optional property // to the response with the status

    • info

      added the optional property // to the response with the status