---
title: "Get Security Case Feed Item"
method: POST
path: "/security-case-feed/{id}/get-item"
tags: ["Security Case Feed Item"]
---

# Get Security Case Feed Item

`POST /security-case-feed/{id}/get-item`

## Request

- Base URL: `https://oneuptime.com/api`
- URL: `https://oneuptime.com/api/security-case-feed/{id}/get-item`
- Auth: API key in header `APIKey`
- TypeScript: <https://skmtc.dev/oneuptime/apis/oneuptime-openapi-specification/docs/security-case-feed/:id/get-item/post.ts> (a function with typed inputs; its response is checked against the schema)

Endpoint to retrieve a single Security Case Feed Item by ID

## Path parameters

- `id` string, uuid, required

## Request body

- object
  - `select` SecurityCaseFeedSelectSchema: Select schema for SecurityCaseFeed. Set fields to true to include them in the response.
    - `_id` boolean
    - `createdAt` boolean
    - `updatedAt` boolean
    - `deletedAt` boolean
    - `projectId` boolean
    - `securityCaseId` boolean
    - `feedInfoInMarkdown` boolean
    - `moreInformationInMarkdown` boolean
    - `securityCaseFeedEventType` boolean
    - `displayColor` boolean
    - `userId` boolean
    - `postedAt` boolean
    - `createdByUserId` boolean
    - `deletedByUserId` boolean

## Response `200`

Successful response

- object
  - `data` SecurityCaseFeed
    - `_id` string, uuid: ID of this object. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Feed], Update: [No access - you don't have permission for this operation]
    - `createdAt` object: Date and Time when the object was created. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Feed], Update: [No access - you don't have permission for this operation]
    - `updatedAt` object: Date and Time when the object was updated. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Feed], Update: [No access - you don't have permission for this operation]
    - `deletedAt` object: Date and Time when the object was deleted. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Feed], Update: [No access - you don't have permission for this operation]
    - `version` number: Object version
    - `projectId` string, uuid, required: ID of the project this feed item belongs to. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Feed], Update: [No access - you don't have permission for this operation]
    - `securityCaseId` string, uuid, required: ID of the case this feed item is about. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Feed], Update: [No access - you don't have permission for this operation]
    - `feedInfoInMarkdown` string, required: What happened, in Markdown. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Feed], Update: [No access - you don't have permission for this operation]
    - `moreInformationInMarkdown` string: Detail behind the entry, shown when it is expanded. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Feed], Update: [No access - you don't have permission for this operation]
    - `securityCaseFeedEventType` 'CaseOpened' | 'DetectionAdded' | 'StatusChanged' | 'PriorityChanged' | 'AssigneeChanged' | 'CaseUpdated' | 'PrivateNote' | 'PlaybookRun' | 'PlaybookStep' | 'ApprovalRequested' | 'ApprovalDecided' | 'ThreatIntel' | 'EntityActivity' | 'Notification' | 'IncidentDeclared' | 'ResponseAction' | 'AiTriage' | 'Task' | 'Evidence' | 'ResponseTarget', required: What kind of thing happened. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Feed], Update: [No access - you don't have permission for this operation]
    - `displayColor` object, required: The color the entry is drawn in. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Feed], Update: [No access - you don't have permission for this operation]
    - `userId` string, uuid: ID of the person who did it. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Feed], Update: [No access - you don't have permission for this operation]
    - `postedAt` object: When it happened. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Feed], Update: [No access - you don't have permission for this operation]
    - `createdByUserId` string, uuid: ID of the person whose action wrote the entry. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Feed], Update: [No access - you don't have permission for this operation]
    - `deletedByUserId` string, uuid: Unused: feed entries are not deleted. Permissions - Create: [No access - you don't have permission for this operation], Read: [Project Owner, Project Admin, Security Admin, Security Member, Security Viewer, Read Security Case Feed], Update: [No access - you don't have permission for this operation]

## Other responses

- `400`: Bad request. This response indicates that the request was malformed or contained invalid data.
- `401`: Unauthorized. This response indicates that the request requires user authentication.
- `402`: Payment Required. This response indicates that the request requires payment or a valid subscription.
- `403`: Forbidden. This response indicates that the server understood the request, but refuses to authorize it.
- `404`: Not found. The record does not exist, belongs to another project, or is one you may not read - the same answer for each.
- `405`: Project not found. This response indicates that the requested project does not exist or is not accessible.
- `408`: Request Timeout. This response indicates that the server timed out waiting for the request.
- `415`: Unable to reach server. This response indicates that the server is currently unreachable or down.
- `422`: Not authorized. This response indicates that the user does not have permission to access the requested resource.
- `500`: Internal Server Error. This response indicates that the server encountered an unexpected condition that prevented it from fulfilling the request.

---

[API](https://skmtc.dev/oneuptime/apis/oneuptime-openapi-specification.md) - [All operations](https://skmtc.dev/oneuptime/apis/oneuptime-openapi-specification/llms.txt) - [OpenAPI document](https://skmtc.dev/oneuptime/apis/oneuptime-openapi-specification/revisions/ba3307d00304?raw)