--- title: "List issues of a view" method: GET path: "/views/{viewId}/issues" tags: ["Views"] --- # List issues of a view `GET /views/{viewId}/issues` ## Request - Base URL: `https://public.escape.tech/v3` - URL: `https://public.escape.tech/v3/views/{viewId}/issues` - Auth: API key in header `X-ESCAPE-API-KEY` List the issues matching a saved issue view. The view filters are applied as the issue predicate. The view must have the `ISSUES` target. ## Path parameters - `viewId` string, uuid, required: The view ID ## Query parameters - `cursor` string: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. - `size` integer: The number of items to return per page - `sortType` 'ASSET' | 'LAST_SEEN' | 'SEVERITY': The type to sort by - `sortDirection` 'asc' | 'desc': The direction to sort by ## Response `200` OK - object - `nextCursor` string, nullable, required - `totalCount` integer - `data` object[], required - `id` string, uuid, required: The id of the issue - `name` string, required: The name of the issue - `fullName` string, required: The full name of the issue - `category` 'ACCESS_CONTROL' | 'CONFIGURATION' | 'CUSTOM' | 'INFORMATION_DISCLOSURE' | 'INJECTION' | 'PROTOCOL' | 'REQUEST_FORGERY' | 'RESOURCE_LIMITATION' | 'SCHEMA' | 'SENSITIVE_DATA', required: The category of the issue - `severity` 'CRITICAL' | 'HIGH' | 'INFO' | 'LOW' | 'MEDIUM', required: The severity level of the issue - `manualSeverity` boolean, required: Whether the severity has been manually overridden - `status` 'FALSE_POSITIVE' | 'IGNORED' | 'MANUAL_REVIEW' | 'OPEN' | 'RESOLVED', required: The current status of the issue - `context` string, required: The context of the issue - `risks` string[], required: Array of risk types associated with the issue - `alertUid` string, required: Unique identifier for the alert - `createdAt` string, required: When the issue was first created - `asset` object, required: The asset of the issue - `id` string, uuid, required: The id of the asset - `class` 'API_SERVICE' | 'CDN' | 'CLOUD_COMPONENT' | 'CLOUD_HOSTING' | 'CODE_PROJECT' | 'CSPM' | 'DEV_TOOLS' | 'FRONTEND' | 'HOST' | 'MOBILE_APP' | 'NETWORK' | 'REPOSITORY' | 'SCHEMA' | 'SOURCE_CODE_MANAGEMENT' | 'TECHNOLOGY', required: The class of the asset - `type` 'APK' | 'AWS_LAMBDA' | 'BITBUCKET_REPOSITORY' | 'BURPSUITE_EXPORT' | 'CODE_PROJECT' | 'DNS' | 'GITHUB_REPOSITORY' | 'GITLAB_REPOSITORY' | 'GRAPHQL' | 'GRAPHQL_SCHEMA' | 'GRPC' | 'HAR_EXPORT' | 'INSOMNIA' | 'IPV4' | 'IPV4_RANGE' | 'IPV6' | 'MCP' | 'OPENAPI' | 'PACKAGE' | 'POSTMAN_COLLECTION' | 'POSTMAN_ENVIRONMENT' | 'REST' | 'SOAP' | 'SOFTWARE' | 'WEBAPP' | 'WEBSOCKET' | 'WP_JSON', required: The type of the asset - `name` string, required: The name of the asset - `externalUrl` string, nullable, required: The external url of the asset - `faviconUrl` string, nullable, required: The favicon url of the asset - `createdAt` string, required: The date and time the asset was created - `lastSeenAt` string, required: The date and time the asset was last seen - `scheduledForDeletionAt` string, nullable, required: The date and time the asset is scheduled for deletion - `status` 'DEPRECATED' | 'FALSE_POSITIVE' | 'MONITORED' | 'OUT_OF_SCOPE' | 'THIRD_PARTY', required: The status of the asset - `tags` object[], required: The tags of the asset - `id` string, uuid, required: The id of the tag - `name` string, required: The name of the tag - `color` string, required: The color of the tag - `risks` string[], required: The risks of the asset - `projectIds` string[], required: IDs of the projects this asset is assigned to - `owners` string[]: Email addresses of the owners of this asset. - `service` object, nullable, required: The service of the asset - `url` string, required: The url of the asset service - `type` 'GRAPHQL' | 'GRPC' | 'MCP' | 'REST' | 'SOAP' | 'WEBSOCKET', required: The type of the asset service - `frontend` object, nullable, required: The frontend of the asset - `url` string, required: The url of the asset frontend - `type` 'WEBAPP', required: The type of the asset frontend - `host` object, nullable, required: The host of the asset - `address` string, required: The address of the asset host - `type` 'DNS' | 'IPV4' | 'IPV6', required: The type of the asset host - `technology` object, nullable, required: Technology metadata for PACKAGE and SOFTWARE assets - `type` 'PACKAGE' | 'SOFTWARE', required: Whether this is a PACKAGE or SOFTWARE asset - `technologyKey` string, required: Versionless technology identifier (e.g. vendor/product or ecosystem/name) - `version` string, nullable, required: Detected version, if known - `cpe` string, nullable, required: Common Platform Enumeration identifier, if known - `mobileApp` object, nullable, required: Mobile app metadata for APK assets - `type` 'APK', required: The type of the mobile app - `filename` string, nullable, required: Original uploaded filename - `bundleId` string, nullable, required: Android package name, if known - `links` object, required: The links of the asset - `assetOverview` string, required: The url to view the asset overview in the platform - `lastSeenScanId` string, nullable, required: ID of the last scan where this issue was seen - `lastSeenScan` object, nullable, required: The last scan in which this issue was observed - `id` string, uuid, required: The id of the scan - `profileId` string, uuid, nullable, required: The id of the profile that ran the scan - `assetId` string, uuid, nullable, required: The id of the asset that was scanned, if any - `status` string, required: The status of the scan - `createdAt` string, required: The date and time the scan was created - `finishedAt` string, nullable, required: The date and time the scan was finished - `score` number, nullable, required: The score of the scan - `coverage` number, nullable, required: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data - `duration` number, required: The duration of the scan - `progressRatio` number, required: The progress ratio of the scan - `initiator` string, required: The initiator of the scan - `kind` string, required: The kind of the scan - `commitHash` string, nullable, required: The commit hash of the scan - `commitBranch` string, nullable, required: The commit branch of the scan - `links` object, required: The links of the scan - `scanIssues` string, required: The url to view the scan issues in the platform - `firstSeenScanId` string, nullable, required: ID of the first scan where this issue was seen - `customRuleId` string, nullable, required: ID of the custom rule if this is a custom issue - `links` object, required - `issueOverview` string, required: URL to view the issue overview in the platform ## Other responses - `400`: Pagination error - `404`: Not found --- [API](https://skmtc.dev/escape/apis/escape-public-api.md) - [All operations](https://skmtc.dev/escape/apis/escape-public-api/llms.txt) - [OpenAPI document](https://skmtc.dev/escape/apis/escape-public-api/revisions/2eab35df40c7?raw)