--- title: "Get an asset" method: GET path: "/assets/{assetId}" tags: ["Assets"] --- # Get an asset `GET /assets/{assetId}` ## Request - Base URL: `https://public.escape.tech/v3` - URL: `https://public.escape.tech/v3/assets/{assetId}` - Auth: API key in header `X-ESCAPE-API-KEY` Get an asset by ID ## Path parameters - `assetId` string, required: The asset ID ## Response `200` OK - object: Detailed information about an asset - `id` string, uuid, required: The id of the asset - `class` 'API_SERVICE' | 'CDN' | 'CLOUD_COMPONENT' | 'CLOUD_HOSTING' | 'CODE_PROJECT' | 'CSPM' | 'DEV_TOOLS' | 'FRONTEND' | 'HOST' | 'MOBILE_APP' | 'NETWORK' | 'REPOSITORY' | 'SCHEMA' | 'SOURCE_CODE_MANAGEMENT' | 'TECHNOLOGY', required - `type` 'APK' | 'AWS_LAMBDA' | 'BITBUCKET_REPOSITORY' | 'BURPSUITE_EXPORT' | 'CODE_PROJECT' | 'DNS' | 'GITHUB_REPOSITORY' | 'GITLAB_REPOSITORY' | 'GRAPHQL' | 'GRAPHQL_SCHEMA' | 'GRPC' | 'HAR_EXPORT' | 'INSOMNIA' | 'IPV4' | 'IPV4_RANGE' | 'IPV6' | 'MCP' | 'OPENAPI' | 'PACKAGE' | 'POSTMAN_COLLECTION' | 'POSTMAN_ENVIRONMENT' | 'REST' | 'SOAP' | 'SOFTWARE' | 'WEBAPP' | 'WEBSOCKET' | 'WP_JSON', required - `name` string, required: The name of the asset - `externalUrl` string, nullable, required: The external url of the asset - `faviconUrl` string, nullable, required: The favicon url of the asset - `description` string, nullable, required: The description of the asset - `createdAt` string, required: The date and time the asset was created - `lastSeenAt` string, required: The date and time the asset was last seen - `scheduledForDeletionAt` string, nullable, required: The date and time the asset is scheduled for deletion - `status` 'DEPRECATED' | 'FALSE_POSITIVE' | 'MONITORED' | 'OUT_OF_SCOPE' | 'THIRD_PARTY', required: The status of the asset - `owners` string[]: The owners of the asset - `tags` object[], required: The tags of the asset - `id` string, uuid, required: The id of the tag - `name` string, required: The name of the tag - `color` string, required: The color of the tag - `risks` string[], required: The risks of the asset - `projectIds` string[], required: IDs of the projects this asset is assigned to - `firstSeenScan` object, nullable, required: The first seen scan of the asset - `id` string, uuid, required: The id of the scan - `profileId` string, uuid, nullable, required: The id of the profile that ran the scan - `assetId` string, uuid, nullable, required: The id of the asset that was scanned, if any - `status` string, required: The status of the scan - `createdAt` string, required: The date and time the scan was created - `finishedAt` string, nullable, required: The date and time the scan was finished - `score` number, nullable, required: The score of the scan - `coverage` number, nullable, required: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data - `duration` number, required: The duration of the scan - `progressRatio` number, required: The progress ratio of the scan - `initiator` string, required: The initiator of the scan - `kind` string, required: The kind of the scan - `commitHash` string, nullable, required: The commit hash of the scan - `commitBranch` string, nullable, required: The commit branch of the scan - `links` object, required: The links of the scan - `scanIssues` string, required: The url to view the scan issues in the platform - `lastSeenScan` object, nullable, required: The last seen scan of the asset - `id` string, uuid, required: The id of the scan - `profileId` string, uuid, nullable, required: The id of the profile that ran the scan - `assetId` string, uuid, nullable, required: The id of the asset that was scanned, if any - `status` string, required: The status of the scan - `createdAt` string, required: The date and time the scan was created - `finishedAt` string, nullable, required: The date and time the scan was finished - `score` number, nullable, required: The score of the scan - `coverage` number, nullable, required: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data - `duration` number, required: The duration of the scan - `progressRatio` number, required: The progress ratio of the scan - `initiator` string, required: The initiator of the scan - `kind` string, required: The kind of the scan - `commitHash` string, nullable, required: The commit hash of the scan - `commitBranch` string, nullable, required: The commit branch of the scan - `links` object, required: The links of the scan - `scanIssues` string, required: The url to view the scan issues in the platform - `service` object, nullable, required: The service of the asset - `type` 'GRAPHQL' | 'GRPC' | 'MCP' | 'REST' | 'SOAP' | 'WEBSOCKET', required - `url` string, required - `framework` string, nullable, required - `authProtocol` string, nullable, required - `authTechnology` 'AUTH0' | 'AWS_IAM' | 'AZURE_ACTIVE_DIRECTORY' | 'COGNITO' | 'KEYCLOAK' | 'UNKNOWN' | 'null', nullable, required - `cloudProvider` 'AKAMAI' | 'ALIBABA' | 'AWS' | 'AZURE' | 'CLOUDFLARE' | 'DIGITALOCEAN' | 'FASTLY' | 'GCP' | 'GRAVITEE' | 'HEROKU' | 'IBM' | 'LINODE' | 'ORACLE' | 'OVH' | 'SCALEWAY' | 'TENCENT' | 'UCLOUD' | 'UNKNOWN' | 'VERCEL' | 'null', nullable, required - `wafProvider` 'ACE_XML_GATEWAY' | 'AESECURE' | 'AIREECDN' | 'AIRLOCK' | 'ALERT_LOGIC' | 'ALIYUNDUN' | 'ANQUANBAO' | 'ANYU' | 'APPROACH' | 'APPWALL' | 'ARMOR_DEFENSE' | 'ARVANCLOUD' | 'ASPA_FIREWALL' | 'ASP_NET_GENERIC' | 'ASP_NET_WAF' | 'ASTRA' | 'AWS_ELASTIC_LOAD_BALANCER' | 'AZIONCDN' | 'AZURE_FRONT_DOOR' | 'BARIKODE' | 'BARRACUDA' | 'BEKCHY' | 'BELUGA_CDN' | 'BINARYSEC' | 'BITNINJA' | 'BLOCKDOS' | 'BLUEDON' | 'BULLETPROOF_SECURITY_PRO' | 'CACHEFLY_CDN' | 'CACHEWALL' | 'CDNNS_APPLICATION_GATEWAY' | 'CHINACACHE_LOAD_BALANCER' | 'CHUANG_YU_SHIELD' | 'CLOUDBRIC' | 'CLOUDFLARE' | 'CLOUDFLOOR' | 'CLOUDFRONT' | 'COMODO_CWATCH' | 'CRAWLPROTECT' | 'DATADOME' | 'DATAPOWER' | 'DENYALL' | 'DISTIL' | 'DOSARREST' | 'DOTDEFENDER' | 'DYNAMICWEB_INJECTION_CHECK' | 'EDGECAST' | 'EEYE_SECUREIIS' | 'EISOO_CLOUD_FIREWALL' | 'EXPRESSION_ENGINE' | 'F5_NETWORKS' | 'FASTLY' | 'FIREPASS' | 'FORTIWEB' | 'GODADDY_WEBSITE_PROTECTION' | 'GOOGLE_CLOUD_APP_ARMOR' | 'GREYWIZARD' | 'HUAWEI_CLOUD_FIREWALL' | 'HYPERGUARD' | 'IMUNIFY360' | 'INCAPSULA' | 'INDUSGUARD' | 'INSTART_DX' | 'ISA_SERVER' | 'JANUSEC_APPLICATION_GATEWAY' | 'JIASULE' | 'KEYCDN' | 'KONA_SITEDEFENDER' | 'KS_WAF' | 'LIMELIGHT_CDN' | 'LITESPEED' | 'MALCARE' | 'MAXCDN' | 'MISSION_CONTROL_SHIELD' | 'MODSECURITY' | 'NAXSI' | 'NEMESIDA' | 'NETCONTINUUM' | 'NETSCALER_APPFIREWALL' | 'NEVISPROXY' | 'NEWDEFEND' | 'NEXUSGUARD_FIREWALL' | 'NINJAFIREWALL' | 'NSFOCUS' | 'NULLDDOS_PROTECTION' | 'ONMESSAGE_SHIELD' | 'OPEN_RESTY_LUA_NGINX' | 'ORACLE_CLOUD' | 'PALO_ALTO_NEXT_GEN_FIREWALL' | 'PENTAWAF' | 'PERIMETERX' | 'PKSECURITY_IDS' | 'POWERCDN' | 'PROFENSE' | 'PT_APPLICATION_FIREWALL' | 'PUHUI' | 'QCLOUD' | 'QINIU' | 'RAYWAF' | 'REBLAZE' | 'RSFIREWALL' | 'SABRE_FIREWALL' | 'SAFE3_WEB_FIREWALL' | 'SAFEDOG' | 'SAFELINE' | 'SECKING' | 'SECUPRESS_WP_SECURITY' | 'SECURESPHERE' | 'SECURE_ENTRY' | 'SENGINX' | 'SERVERDEFENDER_VP' | 'SHADOW_DAEMON' | 'SHIELD_SECURITY' | 'SITEGROUND' | 'SITEGUARD' | 'SITELOCK' | 'SONICWALL' | 'SQUARESPACE' | 'SQUIDPROXY_IDS' | 'STACKPATH' | 'SUCURI_CLOUDPROXY' | 'TENCENT_CLOUD_FIREWALL' | 'TEROS' | 'TRAFFICSHIELD' | 'TRANSIP_WEB_FIREWALL' | 'UEWAF' | 'UNKNOWN' | 'URLMASTER_SECURITYCHECK' | 'URLSCAN' | 'UTM_WEB_PROTECTION' | 'VARNISH' | 'VIETTEL' | 'VIRUSDIE' | 'WALLARM' | 'WATCHGUARD' | 'WEBARX' | 'WEBKNIGHT' | 'WEBLAND' | 'WEBSEAL' | 'WEBTOTEM' | 'WEST263_CDN' | 'WORDFENCE' | 'WPMUDEV_WAF' | 'WP_CERBER_SECURITY' | 'WTS_WAF' | 'XLABS_SECURITY_WAF' | 'XUANWUDUN' | 'YUNDUN' | 'YUNJIASU' | 'YUNSUO' | 'YXLINK' | 'ZENEDGE' | 'ZSCALER' | 'null', nullable, required - `environment` 'DEVELOPMENT' | 'PRODUCTION' | 'STAGING' | 'UNKNOWN' | 'null', nullable, required - `tls` boolean, required - `ips` string[], required - `frontend` object, nullable, required: The frontend of the asset - `type` 'WEBAPP', required - `url` string, required - `framework` string, nullable, required - `APIFramework` string, nullable, required - `authProtocol` string, nullable, required - `authTechnology` 'AUTH0' | 'AWS_IAM' | 'AZURE_ACTIVE_DIRECTORY' | 'COGNITO' | 'KEYCLOAK' | 'UNKNOWN' | 'null', nullable, required - `cloudProvider` 'AKAMAI' | 'ALIBABA' | 'AWS' | 'AZURE' | 'CLOUDFLARE' | 'DIGITALOCEAN' | 'FASTLY' | 'GCP' | 'GRAVITEE' | 'HEROKU' | 'IBM' | 'LINODE' | 'ORACLE' | 'OVH' | 'SCALEWAY' | 'TENCENT' | 'UCLOUD' | 'UNKNOWN' | 'VERCEL' | 'null', nullable, required - `wafProvider` 'ACE_XML_GATEWAY' | 'AESECURE' | 'AIREECDN' | 'AIRLOCK' | 'ALERT_LOGIC' | 'ALIYUNDUN' | 'ANQUANBAO' | 'ANYU' | 'APPROACH' | 'APPWALL' | 'ARMOR_DEFENSE' | 'ARVANCLOUD' | 'ASPA_FIREWALL' | 'ASP_NET_GENERIC' | 'ASP_NET_WAF' | 'ASTRA' | 'AWS_ELASTIC_LOAD_BALANCER' | 'AZIONCDN' | 'AZURE_FRONT_DOOR' | 'BARIKODE' | 'BARRACUDA' | 'BEKCHY' | 'BELUGA_CDN' | 'BINARYSEC' | 'BITNINJA' | 'BLOCKDOS' | 'BLUEDON' | 'BULLETPROOF_SECURITY_PRO' | 'CACHEFLY_CDN' | 'CACHEWALL' | 'CDNNS_APPLICATION_GATEWAY' | 'CHINACACHE_LOAD_BALANCER' | 'CHUANG_YU_SHIELD' | 'CLOUDBRIC' | 'CLOUDFLARE' | 'CLOUDFLOOR' | 'CLOUDFRONT' | 'COMODO_CWATCH' | 'CRAWLPROTECT' | 'DATADOME' | 'DATAPOWER' | 'DENYALL' | 'DISTIL' | 'DOSARREST' | 'DOTDEFENDER' | 'DYNAMICWEB_INJECTION_CHECK' | 'EDGECAST' | 'EEYE_SECUREIIS' | 'EISOO_CLOUD_FIREWALL' | 'EXPRESSION_ENGINE' | 'F5_NETWORKS' | 'FASTLY' | 'FIREPASS' | 'FORTIWEB' | 'GODADDY_WEBSITE_PROTECTION' | 'GOOGLE_CLOUD_APP_ARMOR' | 'GREYWIZARD' | 'HUAWEI_CLOUD_FIREWALL' | 'HYPERGUARD' | 'IMUNIFY360' | 'INCAPSULA' | 'INDUSGUARD' | 'INSTART_DX' | 'ISA_SERVER' | 'JANUSEC_APPLICATION_GATEWAY' | 'JIASULE' | 'KEYCDN' | 'KONA_SITEDEFENDER' | 'KS_WAF' | 'LIMELIGHT_CDN' | 'LITESPEED' | 'MALCARE' | 'MAXCDN' | 'MISSION_CONTROL_SHIELD' | 'MODSECURITY' | 'NAXSI' | 'NEMESIDA' | 'NETCONTINUUM' | 'NETSCALER_APPFIREWALL' | 'NEVISPROXY' | 'NEWDEFEND' | 'NEXUSGUARD_FIREWALL' | 'NINJAFIREWALL' | 'NSFOCUS' | 'NULLDDOS_PROTECTION' | 'ONMESSAGE_SHIELD' | 'OPEN_RESTY_LUA_NGINX' | 'ORACLE_CLOUD' | 'PALO_ALTO_NEXT_GEN_FIREWALL' | 'PENTAWAF' | 'PERIMETERX' | 'PKSECURITY_IDS' | 'POWERCDN' | 'PROFENSE' | 'PT_APPLICATION_FIREWALL' | 'PUHUI' | 'QCLOUD' | 'QINIU' | 'RAYWAF' | 'REBLAZE' | 'RSFIREWALL' | 'SABRE_FIREWALL' | 'SAFE3_WEB_FIREWALL' | 'SAFEDOG' | 'SAFELINE' | 'SECKING' | 'SECUPRESS_WP_SECURITY' | 'SECURESPHERE' | 'SECURE_ENTRY' | 'SENGINX' | 'SERVERDEFENDER_VP' | 'SHADOW_DAEMON' | 'SHIELD_SECURITY' | 'SITEGROUND' | 'SITEGUARD' | 'SITELOCK' | 'SONICWALL' | 'SQUARESPACE' | 'SQUIDPROXY_IDS' | 'STACKPATH' | 'SUCURI_CLOUDPROXY' | 'TENCENT_CLOUD_FIREWALL' | 'TEROS' | 'TRAFFICSHIELD' | 'TRANSIP_WEB_FIREWALL' | 'UEWAF' | 'UNKNOWN' | 'URLMASTER_SECURITYCHECK' | 'URLSCAN' | 'UTM_WEB_PROTECTION' | 'VARNISH' | 'VIETTEL' | 'VIRUSDIE' | 'WALLARM' | 'WATCHGUARD' | 'WEBARX' | 'WEBKNIGHT' | 'WEBLAND' | 'WEBSEAL' | 'WEBTOTEM' | 'WEST263_CDN' | 'WORDFENCE' | 'WPMUDEV_WAF' | 'WP_CERBER_SECURITY' | 'WTS_WAF' | 'XLABS_SECURITY_WAF' | 'XUANWUDUN' | 'YUNDUN' | 'YUNJIASU' | 'YUNSUO' | 'YXLINK' | 'ZENEDGE' | 'ZSCALER' | 'null', nullable, required - `environment` 'DEVELOPMENT' | 'PRODUCTION' | 'STAGING' | 'UNKNOWN' | 'null', nullable, required - `ips` string[], required - `tls` boolean, required - `host` object, nullable, required: The host of the asset - `type` 'DNS' | 'IPV4' | 'IPV6', required - `address` string, required - `ips` string[], required - `ports` object[], required - `port` integer, required - `protocols` string[], required - `records` object[], required - `type` string, required - `value` string, required - `technology` object, nullable, required: Technology metadata for PACKAGE and SOFTWARE assets - `type` 'PACKAGE' | 'SOFTWARE', required: Whether this is a PACKAGE or SOFTWARE asset - `technologyKey` string, required: Versionless technology identifier (e.g. vendor/product or ecosystem/name) - `version` string, nullable, required: Detected version, if known - `cpe` string, nullable, required: Common Platform Enumeration identifier, if known - `referenceUrl` string, nullable, required: Reference URL for the technology - `purl` string, nullable, required: Package URL, for PACKAGE assets - `packageType` 'ALPM' | 'APK' | 'BAZEL' | 'BITBUCKET' | 'BITNAMI' | 'CARGO' | 'COCOAPODS' | 'COMPOSER' | 'CONAN' | 'CONDA' | 'CPAN' | 'CRAN' | 'DEB' | 'DOCKER' | 'GEM' | 'GENERIC' | 'GITHUB' | 'GO' | 'HACKAGE' | 'HEX' | 'HUGGINGFACE' | 'JULIA' | 'LUAROCKS' | 'MAVEN' | 'MLFLOW' | 'NPM' | 'NUGET' | 'OCI' | 'OPAM' | 'OTP' | 'PUB' | 'PYPI' | 'QPKG' | 'RPM' | 'SWID' | 'SWIFT' | 'VSCODE_EXTENSION' | 'YOCTO' | 'null', nullable, required: Package ecosystem, for PACKAGE assets - `wellKnownTechnology` 'ANGULAR' | 'APACHE' | 'NGINX' | 'REACT' | 'REDIS' | 'SVELTE' | 'VUE' | 'null', nullable, required: Well-known technology label, when applicable - `mobileApp` object, nullable, required: Mobile app metadata for APK assets - `type` 'APK', required: The type of the mobile app - `filename` string, nullable, required: Original uploaded filename - `hash` string, nullable, required: Hash of the uploaded binary - `bundleId` string, nullable, required: Android package name, if known - `schemaUrl` string, nullable, required: Time-limited HTTPS URL for schema-class assets; null for other asset classes - `parents` object[]: Parent assets in the relationship graph (first 20) - `id` string, uuid, required: The id of the related asset - `name` string, required: The name of the related asset - `class` 'API_SERVICE' | 'CDN' | 'CLOUD_COMPONENT' | 'CLOUD_HOSTING' | 'CODE_PROJECT' | 'CSPM' | 'DEV_TOOLS' | 'FRONTEND' | 'HOST' | 'MOBILE_APP' | 'NETWORK' | 'REPOSITORY' | 'SCHEMA' | 'SOURCE_CODE_MANAGEMENT' | 'TECHNOLOGY', required: The class of the related asset - `type` 'APK' | 'AWS_LAMBDA' | 'BITBUCKET_REPOSITORY' | 'BURPSUITE_EXPORT' | 'CODE_PROJECT' | 'DNS' | 'GITHUB_REPOSITORY' | 'GITLAB_REPOSITORY' | 'GRAPHQL' | 'GRAPHQL_SCHEMA' | 'GRPC' | 'HAR_EXPORT' | 'INSOMNIA' | 'IPV4' | 'IPV4_RANGE' | 'IPV6' | 'MCP' | 'OPENAPI' | 'PACKAGE' | 'POSTMAN_COLLECTION' | 'POSTMAN_ENVIRONMENT' | 'REST' | 'SOAP' | 'SOFTWARE' | 'WEBAPP' | 'WEBSOCKET' | 'WP_JSON', required: The type of the related asset - `children` object[]: Child assets in the relationship graph (first 20) - `id` string, uuid, required: The id of the related asset - `name` string, required: The name of the related asset - `class` 'API_SERVICE' | 'CDN' | 'CLOUD_COMPONENT' | 'CLOUD_HOSTING' | 'CODE_PROJECT' | 'CSPM' | 'DEV_TOOLS' | 'FRONTEND' | 'HOST' | 'MOBILE_APP' | 'NETWORK' | 'REPOSITORY' | 'SCHEMA' | 'SOURCE_CODE_MANAGEMENT' | 'TECHNOLOGY', required: The class of the related asset - `type` 'APK' | 'AWS_LAMBDA' | 'BITBUCKET_REPOSITORY' | 'BURPSUITE_EXPORT' | 'CODE_PROJECT' | 'DNS' | 'GITHUB_REPOSITORY' | 'GITLAB_REPOSITORY' | 'GRAPHQL' | 'GRAPHQL_SCHEMA' | 'GRPC' | 'HAR_EXPORT' | 'INSOMNIA' | 'IPV4' | 'IPV4_RANGE' | 'IPV6' | 'MCP' | 'OPENAPI' | 'PACKAGE' | 'POSTMAN_COLLECTION' | 'POSTMAN_ENVIRONMENT' | 'REST' | 'SOAP' | 'SOFTWARE' | 'WEBAPP' | 'WEBSOCKET' | 'WP_JSON', required: The type of the related asset - `sources` union[]: The sources of the asset - union: The source of an asset - object - `type` 'asset', required - `assetId` string, required: The id of the source asset - object - `type` 'integration', required - `integrationId` string, required: The id of the source integration - `name` string, nullable, required: The name of the source integration - object - `type` 'manuallyCreated', required - `manuallyCreated` boolean, required: Whether the asset was manually created - `statistics` object: Per-asset statistics - `issues` object, required - `severities` object[], required - `count` integer, required: The number of issues with this severity - `severity` 'CRITICAL' | 'HIGH' | 'INFO' | 'LOW' | 'MEDIUM', required: The severity level - `events` object, required - `attachments` integer, required: The number of event attachments - `rawData` unknown - `metadata` string[]: Metadata flags for the asset - `links` object, required: The links of the asset - `assetOverview` string, required: The url to view the asset overview in the platform ## Other responses - `404`: Not found --- [API](https://skmtc.dev/escape/apis/escape-public-api.md) - [All operations](https://skmtc.dev/escape/apis/escape-public-api/llms.txt) - [OpenAPI document](https://skmtc.dev/escape/apis/escape-public-api/revisions/2eab35df40c7?raw)