---
title: "Get the current or historical overall, domain and criteria ratings for a given TOE and a given risk dimension."
method: GET
path: "/v1/toes/{toe_id}/ratings"
tags: ["Target Of Evaluation TOE"]
---

# Get the current or historical overall, domain and criteria ratings for a given TOE and a given risk dimension.

`GET /v1/toes/{toe_id}/ratings`

Get the current or historical overall, domain and criteria ratings for a given TOE and a given risk dimension. Privacy can only be returned if privacy is enabled for your customer and you have a privacy license for the given TOE.

## Path parameters

- `toe_id` string, required

## Query parameters

- `risk_dimensions[]` string[]
- `current_rating_only` boolean
- `page` integer
- `per_page` integer

## Response `200`

OK

- ToeRatings
  - `meta` PaginationMeta
    - `current_page` integer — The current page of paginated responses.
    - `next_page` integer, nullable — The next page of paginated responses if applicable.
    - `prev_page` integer, nullable — The previous page of paginated responses if applicable.
    - `total_count` integer — The total count of items.
    - `total_pages` integer — The total number of pages for paginated responses.
  - `data` object[] — Data associated with response object.
    - `attributes` ToeRating
      - `analysis_id` string, required — The unique identifier for analysis.
      - `updated_at` string, required — The date a data loss event was updated.
      - `cyber_rating` string, nullable, required — The rating label of an analysis or of some domain or criteria of the analysis.
      - `cyber_rating_numeric` number, nullable, required — The numeric rating of an analysis or of some domain or criteria of the analysis.
      - `cyber_trend` number, nullable — Increase or decrease from the previous analysis rating.
      - `privacy_rating` string, nullable — The rating label of an analysis or of some domain or criteria of the analysis.
      - `privacy_rating_numeric` number, nullable — The numeric rating of an analysis or of some domain or criteria of the analysis.
      - `privacy_trend` number, nullable — Increase or decrease from the previous analysis rating.
      - `security_domain_ratings` object[], required — array of security_domain_ratings
        - `security_domain` string — The security_domain category rating
        - `rating` string, nullable — The rating label of an analysis or of some domain or criteria of the analysis.
        - `rating_numeric` number, nullable — The numeric rating of an analysis or of some domain or criteria of the analysis.
        - `risk_dimension` string — Category of security domain or criteria. Can currently be cyber or privacy.
        - `display_name` string, nullable — The display name seen on RiskRecon portal site.
        - `rated` boolean, nullable — Is this domain or criteria rated?
        - `trend` number, nullable — Increase or decrease from the previous analysis rating.
      - `security_criteria_ratings` object[], required — array of security_criteria_ratings
        - `security_domain` string — The security_domain category for the criterion.
        - `security_criteria` string — The security_criteria associated with the rating.
        - `rating` string, nullable — The rating label of an analysis or of some domain or criteria of the analysis.
        - `rating_numeric` number, nullable — The numeric rating of an analysis or of some domain or criteria of the analysis.
        - `risk_dimension` string — Category of security domain or criteria. Can currently be cyber or privacy.
        - `display_name` string, nullable — The display name seen on RiskRecon portal site.
        - `rated` boolean, nullable — Is this domain or criteria rated?
        - `trend` number, nullable — Increase or decrease from the previous analysis rating.
    - `id` string — The identifier associated with response object.
    - `type` string — The type of object returned.

## Other responses

- `400` — Something was wrong with the request
- `401` — Authentication information was missing or invalid or the user is not authorized to access resource or perform the associated action.
- `403` — FORBIDDEN

---

[API](https://skmtc.dev/recordedfuture/apis/alert-api.md) · [All operations](https://skmtc.dev/recordedfuture/apis/alert-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/recordedfuture/alert-api/revisions/c8c2f68d8b60/schema)