---
title: "Get Static Assets"
method: GET
path: "/projects/{project_id}/rules/static_assets"
tags: ["Rules"]
---

# Get Static Assets

`GET /projects/{project_id}/rules/static_assets`

List the manually defined scope rules (included/excluded hostnames, IPs, wildcards) for a project.

## Path parameters

- `project_id` string, required — The ID of the project

## Query parameters

- `asset` string — Filter by asset (exact string match)
- `static_type` 'ipv4' | 'hostname' | 'wildcard' — Static asset type (hostname, domain, ip, cidr).
- `membership_type` 'include' | 'exclude' — Asset membership type (include or exclude from attack surface).
- `last_applied_before` string, date-time — Filter by last applied before this date (`YYYY-MM-DDTHH:MM:SS`)
- `last_applied_after` string, date-time — Filter by last applied after this date (`YYYY-MM-DDTHH:MM:SS`)
- `include_deleted` boolean — Include records that has been deleted from project. Deleted records will contain `deleted_at` value key
- `limit` integer — Maximum number of results to return
- `cursor` string, nullable — Base 64 string for pagination included in `meta.pagination.next_cursor` field in previous response. If provided, will return the next page of results

## Response `200`

Successful Response

- ApiListResponseStaticAsset — List of static asset rules defining the project's attack surface scope.
  - `data` StaticAsset[], required
    - `asset` string, required
    - `membership_type` 'include' | 'exclude', required — Asset membership type (include or exclude from attack surface).
    - `static_type` 'ipv4' | 'hostname' | 'wildcard', required — Static asset type (hostname, domain, ip, cidr).
    - `global_state` AssetState, required — Current state of an asset or rule (active, inactive, etc.).
      - `added` string, nullable — Description of added asset
      - `errors` string[]
    - `project_state` AssetState, required — Current state of an asset or rule (active, inactive, etc.).
      - `added` string, nullable — Description of added asset
      - `errors` string[]
    - `inserted_at` string, date-time, nullable — When the asset was added
    - `last_applied_at` string, date-time, nullable — When the asset was last applied
    - `delete_requested_at` string, date-time, nullable — When the asset was requested to be deleted from project
    - `deleted_at` string, date-time, nullable — When the asset was deleted from the project
  - `meta` ApiMeta, required — Response metadata including pagination, counts, and request parameters.
    - `params` object, nullable
    - `counts` ApiCount — Result count metadata.
      - `total` integer, nullable
      - `returned` integer, required
    - `pagination` PaginationResponse — Cursor-based pagination data in responses.
      - `next_cursor` string, nullable — An opaque value which should be passed as the `cursor` to retrieve the next page of results. If None or not present there are no remaining pages. This value should not be interpreted by the client.
      - `limit` integer — The number of items returned
      - `total` integer, nullable
      - `sort` array[], nullable — The sort order of the results
        - unknown[]
          - unknown
    - `request_id` string, nullable

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/recordedfuture/apis/alert-api.md) · [All operations](https://skmtc.dev/recordedfuture/apis/alert-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/recordedfuture/alert-api/revisions/c8c2f68d8b60/schema)