---
title: "GET /cases"
method: GET
path: "/cases"
tags: ["cases"]
---

# GET /cases

`GET /cases`

## Response `200`

Case workspace list

- ActionCase[]
  - `createdAt` string, required
  - `description` string, nullable
  - `entityType` string, nullable
  - `entityValue` string, nullable
  - `evidence` ActionCaseEvidence[], required
    - `createdAt` string, required
    - `description` string, nullable
    - `id` string, required
    - `kind` string, required
    - `payload` object, required
    - `title` string, required
  - `id` string, required
  - `linkedAlertId` string, nullable
  - `linkedCveFindingId` string, nullable
  - `linkedReportId` string, nullable
  - `organizationId` string, nullable
  - `priority` string, required
  - `status` string, required
  - `title` string, required
  - `updatedAt` string, required
  - `userId` string, required

## Other responses

- `401` — Unauthorized

---

[API](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api.md) · [All operations](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/ismalicious/ismalicious-threat-intelligence-api/revisions/c990a0940b7d/schema)