---
title: "List security findings for the authenticated account"
method: GET
path: "/api/v1/security-findings"
tags: ["security-findings"]
---

# List security findings for the authenticated account

`GET /api/v1/security-findings`

## Request

- Base URL: `https://monit.rs`
- URL: `https://monit.rs/api/v1/security-findings`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer

Read-only. All tiers. Findings scoped by ownership (user_id). The `evidence` field may contain exploit payloads, HTTP request/response snippets, and other sensitive data — same content the customer sees in their own dashboard. Filter by endpoint_id / severity / status / category / since.

## Query parameters

- `endpoint_id` string, uuid
- `severity` 'critical' | 'high' | 'medium' | 'low' | 'info'
- `status` 'open' | 'closed' | 'ignored'
- `category` string
- `since` string, date-time
- `limit` integer

## Response `200`

List of security findings.

## Other responses

- `401`: Missing or invalid credentials.
- `403`: Missing read:security-findings scope.

---

[API](https://skmtc.dev/monit/apis/monit-rs-public-api.md) · [All operations](https://skmtc.dev/monit/apis/monit-rs-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/monit/apis/monit-rs-public-api/revisions/7e1923981112?raw)