---
title: "List Signatures"
method: GET
path: "/projects/{project_id}/signatures"
tags: ["Signatures"]
---

# List Signatures

`GET /projects/{project_id}/signatures`

## Request

- Base URL: `https://api.securitytrails.com/v2`
- URL: `https://api.securitytrails.com/v2/projects/{project_id}/signatures`
- Auth: none declared

List signatures matching the given filters.

Unlike `/exposures`, signatures don't need to be related to an asset in the project, and don't include affected asset information.

If `next_cursor` is present in the response, it can be used to fetch the next page of results by passing it as `cursor`.

## Path parameters

- `project_id` string, required: The ID of the project

## Query parameters

- `limit` integer: The number of signatures
- `filter_cve_id` string, nullable: Filter for signatures tied to a vulnerability with the provided CVE
- `filter_severity_exact` 'informational' | 'moderate' | 'critical'
- `filter_severity_min` 'informational' | 'moderate' | 'critical'
- `sort_by` 'added_at' | 'id' | 'name' | 'severity'
- `sort_direction` 'asc' | 'desc'
- `cursor` string, nullable: Integer offset for pagination. Pass the value from `next_cursor` in the previous response to fetch the next page.
- `query` string, nullable: Free-text search matched against the signature's name and ID. If given in `YYYY-MM-DD` format, also matches signatures by the date they were added.

## Response `200`

Successful Response

- ApiListResponseSignatureResponse
  - `data` SignatureResponse[], required
    - `id` string, required
    - `name` string
    - `description` string, nullable
    - `severity` union, required
      - 'informational' | 'moderate' | 'critical'
      - string
    - `added_at` string, date-time, nullable: Date when this signature was added to ASI
    - `updated_at` string, date-time, nullable
    - `severity_score` integer, nullable
    - `primary_detection_id` string, nullable
    - `tags` string[], nullable
    - `cve_ids` string[], nullable
    - `detection_count` integer, nullable
    - `vulnerability_count` integer, nullable
    - `technology_count` integer, nullable
    - `available_includes` string[], nullable
  - `meta` ApiMeta, required
    - `params` object, nullable
    - `counts` ApiCount
      - `total` integer, nullable
      - `returned` integer, required
    - `pagination` PaginationResponse
      - `next_cursor` string, nullable: An opaque value which should be passed as the `cursor` to retrieve the nextpage of results
      - `limit` integer, nullable: The number of items returned
      - `total` integer, nullable
      - `sort` array[], nullable: The sort order of the results
        - unknown[]
          - unknown
    - `request_id` string, nullable

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/recordedfuture/apis/attack-surface-intelligence.md) - [All operations](https://skmtc.dev/recordedfuture/apis/attack-surface-intelligence/llms.txt) - [OpenAPI document](https://skmtc.dev/recordedfuture/apis/attack-surface-intelligence/revisions/7fd5c7304957?raw)