---
title: "Findings of a content audit report"
method: GET
path: "/stats/audits/{id}/findings"
tags: ["Stats"]
---

# Findings of a content audit report

`GET /stats/audits/{id}/findings`

## Request

- Base URL: `https://api.nippy.host`
- URL: `https://api.nippy.host/stats/audits/{id}/findings`
- Auth: `bearer` (a scheme the document does not define)

Admin-only. Policy tier A first (findings with no tier last), then highest confidence, then the worst harm. Each finding carries the site status and the owner ban as they are now.

## Path parameters

- `id` string, required

## Query parameters

- `status` 'open' | 'actioned' | 'dismissed'
- `confidence` 'high' | 'medium' | 'low'
- `category` 'csam' | 'phishing' | 'malware' | 'illegal' | 'scam' | 'spam' | 'suspicious' | 'privacy'
- `tier` 'A' | 'B' | 'C' | 'D': Null for findings with no tier.
- `action` 'ban_owner' | 'suspend_site' | 'email_owner' | 'dismiss': Null for open findings with no recommendation.
- `page` number
- `pageSize` number

## Response `200`

- APIPaginatedAuditFindingsResponse
  - `data` APIAuditFinding[], required
    - `id` string, required
    - `reportId` string, required
    - `subdomain` string, required
    - `siteId` string, nullable, required: Null when the site was deleted after the audit.
    - `siteStatus` string, nullable, required: The site status now, e.g. `live` or `suspended`.
    - `siteSuspendedReason` string, nullable, required
    - `accountId` string, nullable, required
    - `ownerUserId` string, nullable, required
    - `ownerEmail` string, nullable, required: The owner’s address at publish time.
    - `ownerBanned` boolean, required: The owner is banned now.
    - `ownerEvidenceCases` number, required: Evidence cases (ADR 0061) opened on the owner. A ban from the audit needs one when the owner has a suspected-CSAM finding.
    - `category` 'csam' | 'phishing' | 'malware' | 'illegal' | 'scam' | 'spam' | 'suspicious' | 'privacy', required
    - `confidence` 'high' | 'medium' | 'low', required
    - `summary` string, required
    - `evidence` string, nullable, required
    - `tier` 'A' | 'B' | 'C' | 'D', required: Null for findings with no tier.
    - `recommendedAction` 'ban_owner' | 'suspend_site' | 'email_owner' | 'dismiss', required: Null for open findings with no recommendation.
    - `recommendationReason` string, nullable, required: Why that tier and that action.
    - `status` 'open' | 'actioned' | 'dismissed', required
    - `reviewNote` string, nullable, required
    - `reviewedAt` string, nullable, required
    - `reviewedByName` string, nullable, required
    - `createdAt` string, required
  - `page` number, required
  - `pageSize` number, required
  - `total` number, required
  - `totalPages` number, required

## Other responses

- `403`: Admin access required

---

[API](https://skmtc.dev/nippy/apis/nippy-backend-api.md) · [All operations](https://skmtc.dev/nippy/apis/nippy-backend-api/llms.txt) · [OpenAPI document](https://skmtc.dev/nippy/apis/nippy-backend-api/revisions/7ab23f040a55?raw)