---
title: "List Website Audit targets"
method: GET
path: "/v1/website-audit/targets"
tags: ["Website Audit"]
---

# List Website Audit targets

`GET /v1/website-audit/targets`

## Request

- Base URL: `https://api.inth.com`
- URL: `https://api.inth.com/v1/website-audit/targets`
- Auth: HTTP bearer

Bounded discovery ordered by ID. Includes complete settings, ownership, monitoring and latest scan status. Requires projects.read and website-audit.read.

## Query parameters

- `organizationId` string
- `projectId` string
- `limit` integer
- `cursor` string

## Response `200`

Success

- object
  - `success` unknown, required
  - `data` WebsiteTarget[], required
    - `approvedAuditPolicy` object
      - `version` 1, required
      - `revision` string, required
      - `origin` string, required
      - `approvedAt` string, required
      - `approvalReference` string, required
      - `cookies` object[], required
        - `name` string, required
        - `ownerHost` string, required
        - `partitionKey` string, nullable, required
        - `maxRemainingSeconds` number
        - `sessionOnly` boolean
        - `security` object
          - `secure` boolean
          - `httpOnly` boolean
          - `sameSite` 'Strict' | 'Lax' | 'None'
          - `domain` string
          - `path` string
          - `hostOnly` boolean
          - `partitioned` boolean
        - `priorConsent` object
          - `purpose` 'advertising' | 'measurement', required
          - `path` string, required
          - `countries` string[], required
          - `requirement` union, required
            - object
              - …
            - object
              - …
            - object
              - …
        - `afterWithdrawal` object
          - `removal` 'required', required
          - `purposeId` string, required
          - `reference` string, required
        - `afterRefusal` object
          - `role` 'identifier', required
          - `documentScope` 'root', required
          - `purposeId` string, required
          - `channels` string[], required
          - `transmission` object
            - `kind` 'cookie_header', required
            - `origin` string, required
            - `path` string, required
            - `method` 'GET' | 'POST', required
            - `reference` string, required
          - `reference` string, required
        - `embeddedDocument` object
          - `url` string, required
          - `reference` string, required
        - `refreshApproval` object
          - `reference` string, required
      - `collections` object[]
        - `vendor` 'google-analytics' | 'posthog' | 'plausible' | 'databuddy' | 'linkedin-insight-tag' | 'x-pixel' | 'custom', required
        - `origin` string, required
        - `path` string, required
        - `method` 'GET' | 'POST', required
        - `initiatorUrl` string, required
        - `purpose` 'advertising' | 'measurement', required
        - `countries` string[], required
        - `requirement` union, required
          - object
            - `kind` 'required', required
          - object
            - `kind` 'exempt', required
            - `reference` string, required
          - object
            - `kind` 'unresolved', required
        - `payloadFields` string[], required
        - `replayProbe` object
          - `eventType` string, required
          - `markerField` string, required
          - `purposeId` string, required
          - `permittedBehaviour` 'discard_denied_events', required
          - `reference` string, required
        - `embeddedDocument` object
          - `url` string, required
          - `source` 'script' | 'parser' | 'document', required
          - `reference` string, required
        - `identifyingSignal` object
          - `kind` 'pixel' | 'fingerprint', required
          - `source` 'script' | 'parser' | 'document', required
          - `fields` string[], required
          - `reference` string, required
        - `afterWithdrawal` object
          - `purposeId` string, required
          - `reference` string, required
        - `proxyRouting` object
          - `kind` 'server_proxy' | 'cname', required
          - `forwarding` 'unconditional' | 'conditional', required
          - `reference` string, required
          - `revision` string, required
          - `digest` string, required
          - `observedAt` string, required
          - `validUntil` string, required
          - `recipient` object, required
            - `origin` string, required
            - `path` string, required
            - `relationship` 'third_party' | 'first_party' | 'unresolved', required
            - `method` 'GET' | 'POST', required
          - `fields` object[], required
            - `source` string, required
            - `destination` string, required
          - `cnameChain` string[]
      - `storage` object[]
        - `mechanism` 'local' | 'session' | 'indexeddb' | 'cache', required
        - `accessScope` 'document-native-methods', required
        - `origin` string, required
        - `key` string, required
        - `database` string, nullable, required
        - `store` string, nullable, required
        - `purpose` 'advertising' | 'measurement', required
        - `countries` string[], required
        - `requirement` union, required
          - object
            - `kind` 'required', required
          - object
            - `kind` 'exempt', required
            - `reference` string, required
          - object
            - `kind` 'unresolved', required
        - `embeddedDocument` object
          - `url` string, required
          - `reference` string, required
        - `afterRefusal` object
          - `role` 'identifier', required
          - `documentScope` 'root', required
          - `purposeId` string, required
          - `channels` string[], required
          - `transmission` object
            - `kind` 'fetch_get_query', required
            - `origin` string, required
            - `path` string, required
            - `parameter` string, required
            - `reference` string, required
          - `reference` string, required
      - `withdrawal` object
        - `reference` string, required
        - `countries` string[], required
        - `route` object
          - `selector` string
          - `label` string
          - `reference` string, required
      - `googleInitialization` object
        - `reference` string, required
        - `transport` 'native_data_layer_push', required
        - `dataLayerName` 'dataLayer', required
        - `requiredDefault` true, required
        - `countries` string[], required
        - `consentTypes` string[], required
        - `defaultStates` object[]
          - `type` 'ad_storage' | 'analytics_storage' | 'ad_user_data' | 'ad_personalization' | 'functionality_storage' | 'personalization_storage' | 'security_storage', required
          - `state` 'denied' | 'granted', required
        - `choiceStates` object[]
          - `choice` 'accept_all' | 'reject_all' | 'accept_measurement_only' | 'accept_functionality_only' | 'accept_marketing_only', required
          - `updateRequired` boolean, required
          - `states` object[], required
            - `type` 'ad_storage' | 'analytics_storage' | 'ad_user_data' | 'ad_personalization' | 'functionality_storage' | 'personalization_storage' | 'security_storage', required
            - `state` 'denied' | 'granted', required
        - `categoryMapping` object
          - `reference` string, required
          - `categories` object[], required
            - `categoryId` string, required
            - `consentTypes` string[], required
        - `adsDataRedaction` object
          - `reference` string, required
          - `required` true, required
        - `implementationMode` object
          - `reference` string, required
          - `mode` 'basic' | 'advanced', required
      - `auditExpectations` object
        - `regionalBanner` object[]
          - `countries` string[], required
          - `banner` 'required' | 'not_expected', required
          - `reference` string, required
        - `noticeAtCollection` object
          - `countries` string[], required
          - `notice` object, required
            - `selector` string
            - `label` string
            - `reference` string, required
          - `reference` string, required
        - `consentStorageScope` object
          - `scope` 'host_only', required
          - `countries` string[], required
          - `reference` string, required
        - `statisticalException` object
          - `countries` string[], required
          - `purposeIds` string[], required
          - `notice` object, required
            - `selector` string
            - `label` string
            - `reference` string, required
          - `objection` object, required
            - `selector` string
            - `label` string
            - `reference` string, required
          - `reference` string, required
        - `disclosedVendors` object
          - `vendors` string[], required
          - `reference` string, required
        - `cmpMaintenance` object
          - `platform` string, required
          - `minimumVersion` string, required
          - `reference` string, required
        - `downstreamAssurance` object
          - `recipients` string[], required
          - `reference` string, required
        - `instrumentedEvidence` object
          - `rules` string[], required
          - `reference` string, required
      - `selectedActivity` object
        - `reference` string, required
        - `countries` string[], required
        - `categories` object[], required
          - `categoryId` string, required
          - `collection` true
          - `cookies` string[]
      - `choiceInterface` object
        - `reference` string, required
        - `countries` string[], required
        - `affirmativeOptIn` true
        - `privacyNoticeUrl` string
        - `accessibility` 'wcag_2_1_aa'
        - `acceptAllOffered` true
      - `refusalPersistence` object
        - `reference` string, required
        - `countries` string[], required
        - `scopes` string[], required
      - `tcf` object
        - `reference` string, required
        - `countries` string[], required
        - `choices` object
          - `acceptAll` object
            - `purposeConsents` integer[], required
            - `vendorConsents` integer[], required
            - `specialFeatureOptins` integer[], required
          - `rejectAll` object
            - `allowedPurposeConsents` integer[], required
            - `allowedVendorConsents` integer[], required
            - `allowedSpecialFeatureOptins` integer[], required
        - `publisherRestrictions` object[]
          - `purposeId` integer, required
          - `restrictionType` 0 | 1 | 2, required
          - `vendorIds` integer[], required
        - `consentModeMapping` object
          - `reference` string, required
          - `transport` 'native_data_layer_push', required
          - `dataLayerName` 'dataLayer', required
          - `types` object[], required
            - `type` 'ad_storage' | 'analytics_storage' | 'ad_user_data' | 'ad_personalization' | 'functionality_storage' | 'personalization_storage' | 'security_storage', required
            - `purposeConsents` integer[], required
      - `usPrivacy` object
        - `reference` string, required
        - `subdivisions` string[], required
        - `optOutChoice` 'saved_rejection'
        - `gpp` object
          - `sections` object[], required
            - `api` 'usnat' | 'usca' | 'usva' | 'usco' | 'usut' | 'usct', required
            - `subdivisions` string[], required
          - `optOutFields` string[], required
        - `usp` object
          - `optOutFlag` 'required', required
        - `saleSharing` object
          - `transports` object[], required
            - `origin` string, required
            - `path` string, required
            - `method` 'GET' | 'POST', required
            - `activity` 'sale' | 'sharing' | 'targeted_advertising', required
            - `reference` string, required
        - `optOutRoute` union
          - object
            - `kind` 'consent_manager', required
            - `label` 'Do Not Sell or Share My Personal Information' | 'Do Not Sell My Personal Information' | 'Do Not Share My Personal Information' | 'Your Privacy Choices' | 'Your California Privacy Choices', required
            - `pages` string[]
          - object
            - `kind` 'page', required
            - `label` 'Do Not Sell or Share My Personal Information' | 'Do Not Sell My Personal Information' | 'Do Not Share My Personal Information' | 'Your Privacy Choices' | 'Your California Privacy Choices', required
            - `path` string, required
            - `pages` string[]
    - `crawlMode` string, required
    - `enabled` boolean, required
    - `id` string, required
    - `includeUrls` string[]
    - `lastRunAt` string, required
    - `lastRunStatus` string, nullable, required
    - `maxDepth` integer, required
    - `maxPages` integer, required
    - `monitoring` object, nullable
      - `enabled` boolean, required
      - `pending` object, nullable
        - `effectiveAt` string, required
        - `scheduleCadence` 'hourly' | 'daily' | 'weekly' | 'biweekly' | 'monthly', required
      - `periodEndsAt` string
      - `scheduleCadence` 'hourly' | 'daily' | 'weekly' | 'biweekly' | 'monthly', required
    - `organizationId` string, required
    - `origin` string, required
    - `policyUrls` string[]
    - `projectId` string, required
    - `projectName` string, required
    - `projectSlug` string, required
    - `regionProfiles` string[]
    - `scheduleCadence` string, required
    - `ownership` object
      - `domain` string, required
      - `method` 'dns' | 'http' | 'email' | 'search_console', nullable, required
      - `status` 'unverified' | 'pending' | 'verified' | 'recheck_failed' | 'third_party', required
      - `tier` 'unverified' | 'verified' | 'third_party', required
      - `verifiedAt` string, required
  - `pagination` Pagination, required
    - `nextCursor` string, nullable, required: Cursor for the next page; null on the last page.
    - `hasMore` boolean, required

## Other responses

- `400`: The request payload or parameters are invalid.
- `401`: Authentication is missing, invalid, or expired.
- `403`: The credential is valid but may not perform the operation. `INSUFFICIENT_SCOPE`: the credential was never granted the capability the operation needs. `details.requiredScope` names it, and the `WWW-Authenticate` header carries `Bearer error="insufficient_scope"`. An OAuth client fixes this by requesting the scope; an organization API key cannot gain it. `FORBIDDEN`: the capability is present but the membership behind the credential lacks the role, or the resource belongs to another organization.
- `404`: The requested resource was not found.

## Changes

- **2026-10-31** `a3f4100e14c9`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/inth/apis/inth-api/changes/v1/website-audit/targets/get.md)

---

[API](https://skmtc.dev/inth/apis/inth-api.md) - [All operations](https://skmtc.dev/inth/apis/inth-api/llms.txt) - [OpenAPI document](https://skmtc.dev/inth/apis/inth-api/revisions/5a1be8d43402?raw)