---
title: "List threat model version history"
method: GET
path: "/api/threat-model/versions"
tags: ["Threat Model"]
---

# List threat model version history

`GET /api/threat-model/versions`

## Request

- Base URL: `https://app.cotool.ai`
- URL: `https://app.cotool.ai/api/threat-model/versions`
- Auth: HTTP bearer

List the full threat model version history for the organization.

## Response `200`

Successful response

- object
  - `versions` object[], required: Full version history for this threat model
    - `id` string, uuid, required: Unique identifier for this threat model version
    - `version` integer, required: Monotonic version number
    - `isCurrent` boolean, required: Whether this version is currently active for the organization
    - `authorType` 'ai' | 'user', required: Whether this version was created by AI or a human
    - `authorId` string, uuid, nullable, required: User ID for human edits, or null for AI-authored versions
    - `modelAlias` string, nullable, required: Model alias that produced this version, or null for human edits
    - `changeDescription` string, nullable, required: Short description of why this version was created
    - `createdAt` string, required: Timestamp when this version was created
  - `recentVersionWindow` integer, required: How many recent versions threat model logic typically needs to look at

## Other responses

- `400`: Bad request — input validation failed or the request was malformed
- `401`: Unauthorized — missing or invalid API key / session
- `403`: Forbidden — the authenticated user lacks the required permissions
- `500`: Internal server error

---

[API](https://skmtc.dev/cotool/apis/cotool-api.md) - [All operations](https://skmtc.dev/cotool/apis/cotool-api/llms.txt) - [OpenAPI document](https://skmtc.dev/cotool/apis/cotool-api/revisions/f5abe0add203?raw)