---
title: "Get List of Scan Permissions"
method: GET
path: "/api/cmp/v1/applications/{id}/scans/{scanId}/permissions"
tags: ["Applications"]
---

# Get List of Scan Permissions

`GET /api/cmp/v1/applications/{id}/scans/{scanId}/permissions`

## Request

- Base URL: `https://hostname`
- URL: `https://hostname/api/cmp/v1/applications/{id}/scans/{scanId}/permissions`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://{hostname}/api/access/v1/oauth/token` scopes: `COOKIE_READ`

Use this API to retrieve the list of permissions detected during a specific application scan. The response includes each permission's name, category, status, description, and sensitivity.

## Path parameters

- `id` string, uuid, required
- `scanId` string, uuid, required

## Response `200`

OK

- ApplicationScanPermissionPublicDto[]
  - `name` string: Name of the permission
  - `category` string: Categorisation of the permission
  - `description` string: Description of the permission
  - `status` string: Status of the permission
  - `sensitivity` string: Sensitivity of the permission

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `429`: Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500`: Internal Server Error

---

[API](https://skmtc.dev/onetrust/apis/consent-preferences-cookie-consent.md) - [All operations](https://skmtc.dev/onetrust/apis/consent-preferences-cookie-consent/llms.txt) - [OpenAPI document](https://skmtc.dev/onetrust/apis/consent-preferences-cookie-consent/revisions/b4fb4606f973?raw)