---
title: "listLatestCookieInventory"
method: GET
path: "/v1/website-audit/cookie-inventory"
tags: ["Integrations"]
---

# listLatestCookieInventory

`GET /v1/website-audit/cookie-inventory`

## Request

- Base URL: `https://api.inth.com`
- URL: `https://api.inth.com/v1/website-audit/cookie-inventory`
- Auth: HTTP bearer

Requires user-delegated website-audit.read and projects.read. Latest completed owned-site scan per target, ordered by target ID. Excludes vendor assessments. dataCompleteness:latest-scan-index explicitly separates cookie bodies: follow cookiesPath or call list_website_scan_cookies for each scanId and follow its cursor. Full cookie attributes, vendor evidence, coverage and dataQuality remain available. No recent-history cutoff.

## Query parameters

- `organizationId` string
- `limit` integer
- `cursor` string
- `projectId` string

## Response `200`

Success

- object
  - `success` true, required
  - `data` LatestCookieInventory, required
    - `organizationId` string, required
    - `items` object[], required
      - `id` string, required
      - `targetId` string, required
      - `scanId` string, required
      - `projectId` string, required
      - `projectName` string, required
      - `projectSlug` string, required
      - `website` string, required
      - `completedAt` string, nullable, required
      - `cookiesPath` string, required
    - `pageSize` integer, required
    - `nextCursor` string, nullable, required
    - `dataCompleteness` 'latest-scan-index', required
    - `cookiesTool` 'list_website_scan_cookies', required

## Other responses

- `400`: The request payload or parameters are invalid.
- `401`: Authentication is missing, invalid, or expired.
- `403`: The credential is valid but may not perform the operation. `INSUFFICIENT_SCOPE`: the credential was never granted the capability the operation needs. `details.requiredScope` names it, and the `WWW-Authenticate` header carries `Bearer error="insufficient_scope"`. An OAuth client fixes this by requesting the scope; an organization API key cannot gain it. `FORBIDDEN`: the capability is present but the membership behind the credential lacks the role, or the resource belongs to another organization.
- `404`: The requested resource was not found.
- `409`: The request conflicts with the current resource state.
- `503`: The capability is temporarily paused by an operator. Retry later.

## Changes

- **2026-10-31** `a3f4100e14c9`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/inth/apis/inth-api/changes/v1/website-audit/cookie-inventory/get.md)

---

[API](https://skmtc.dev/inth/apis/inth-api.md) - [All operations](https://skmtc.dev/inth/apis/inth-api/llms.txt) - [OpenAPI document](https://skmtc.dev/inth/apis/inth-api/revisions/8741280c3463?raw)