---
title: "Get external score history for one supplier"
method: GET
path: "/public/v1/scores/externals"
tags: ["Scores - Externals"]
---

# Get external score history for one supplier

`GET /public/v1/scores/externals`

## Request

- Base URL: `https://api.prewave.com`
- URL: `https://api.prewave.com/public/v1/scores/externals`
- Auth: API key in header `X-Auth-Token`
- TypeScript: <https://skmtc.dev/prewave/apis/public-prewave-api/docs/public/v1/scores/externals/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns score history per event type for one supplier. Identify the supplier using query parameters such as supplier ID, customer ID, own site ID, or Prewave ID — the same identifiers you use elsewhere in the public supplier APIs.

**When to use this**
- Auditing what scores are stored for one supplier after an integration run.
- Showing score history in a customer-facing report or internal dashboard.
- Verifying that an upload landed as expected for a given supplier.

**Optional filters**
- `perspectiveId` — limit results to a specific perspective (defaults to your account’s default).
- `groupId` — narrow results to a score group when needed.

**If something goes wrong**
- **400** — No supplier identifier was provided, or more than one supplier matched. Add or refine identifiers (for example include `source`).
- **404** — No supplier matched the identifiers you sent.

**Required permission:** `access_public_internal_score`

## Query parameters

- `supplierId` string: Supplier ID of the target. Can be combined with customerId, ownId, and/or prewaveId.
- `customerId` string: Customer ID of the target. Can be combined with supplierId, ownId, and/or prewaveId.
- `ownId` string: Own site ID of the target. Can be combined with supplierId, customerId, and/or prewaveId.
- `prewaveId` integer: Prewave ID of the target. Can be combined with supplierId, customerId, and/or ownId.
- `source` string: Optional source system to filter by. Applies to supplierId, customerId, and ownId (not prewaveId).
- `perspectiveId` integer
- `groupId` integer

## Response `200`

Score history for the supplier that matched your identifiers.

- PublicExternalScoreResponse
  - `identifier` PublicExternalTargetIdentifier, required: Supplier site identifier. At least one lookup key (`supplierId`, `customerId`, `ownId`, or `prewaveId`) should be set; `source` optionally narrows text identifiers.
    - `supplierId` string, nullable: Supplier ID of the target. Can be combined with customerId, ownId, and/or prewaveId.
    - `customerId` string, nullable: Customer ID of the target. Can be combined with supplierId, ownId, and/or prewaveId.
    - `ownId` string, nullable: Own site ID of the target. Can be combined with supplierId, customerId, and/or prewaveId.
    - `prewaveId` integer, nullable: Prewave ID of the target. Can be combined with supplierId, customerId, and/or ownId.
    - `source` string, nullable: Optional source system to filter by. Applies to supplierId, customerId, and ownId (not prewaveId).
  - `scores` PublicExtScoreHistory[], required
    - `group` PublicInfotagGroup, required
      - `id` integer, required: Id of the infotag group
      - `name` string, required: Name of the infotag group
      - `sname` string, required: Short name/code of the infotag group
    - `eventTypeKey` string, required
    - `score` Score, required
      - `value` integer, required
      - `risk` 'NA' | 'No' | 'Low' | 'Mid' | 'High' | 'Critical', required: Impact level.
    - `comment` string, nullable
    - `updatedAt` string, date-time, required: Last update. Timestamp (ISO 8601 UTC)
    - `validFrom` string, date-time, nullable: Start of validity period. Timestamp (ISO 8601 UTC)
    - `validTo` string, date-time, nullable: End of validity period. Timestamp (ISO 8601 UTC)
    - `history` PublicExtScoreHistory[], required

## Other responses

- `400`: Supplier could not be identified uniquely — provide at least one identifier or narrow the match (for example with `source`).
- `403`: 403 Forbidden - Authentication or authorization failure. This status code is returned when: (1) the request lacks valid authentication credentials (missing or invalid X-Auth-Token header), or (2) the authenticated user does not have the required permission to access this resource.
- `404`: No supplier found for the identifiers provided, or you do not have access to that supplier.
- `429`: 429 Too Many Requests - API rate limit exceeded. The request has been rejected because the rate limit for this endpoint has been exceeded. Default rate limits: GET requests - 100 per 10 seconds, 500 per minute; POST/PUT/PATCH/DELETE requests - 20 per 10 seconds, 100 per minute. For increased access, please contact customer success.
- `500`: 500 Internal Server Error - An unexpected error occurred on the server. The request may or may not have been processed.

---

[API](https://skmtc.dev/prewave/apis/public-prewave-api.md) - [All operations](https://skmtc.dev/prewave/apis/public-prewave-api/llms.txt) - [OpenAPI document](https://skmtc.dev/prewave/apis/public-prewave-api/revisions/8b6e3b3827ca?raw)