---
title: "This resource gets a `TOE` object by its identifier."
method: GET
path: "/v1/toe/{toe_id}"
tags: ["Target Of Evaluation TOE"]
---

# This resource gets a \`TOE\` object by its identifier.

`GET /v1/toe/{toe_id}`

## Request

- Base URL: `https://api.sandbox.riskrecon.com`
- URL: `https://api.sandbox.riskrecon.com/v1/toe/{toe_id}`
- Auth: HTTP bearer

This resource gets a `TOE` object by its identifier.
This include overall ratings and some domain rating information for the current analysis of the provided TOE id.

## Path parameters

- `toe_id` string, required

## Response `200`

OK

- Toe
  - `web_encryption_rating` number: The numeric rating for given security_domain.
  - `web_app_security_rating` number: The numeric rating for given security_domain.
  - `toe_short_name` string: The Company or entity name.
  - `toe_id` string, uuid: The unique identifier for the Target Of Evaluation (TOE).
  - `ticker_symbols` object[]: A collection of TickerSymbols
    - `ticker_symbol` string: A ticker symbol associated with the TOE if available.
    - `exchange_name` string: The exchange the ticker symbol is associated with.
  - `threat_intell_rating` number: The numeric rating for given security_domain.
  - `system_hosting_rating` number: The numeric rating for given security_domain.
  - `subscription_level` string: The subscription level for the TOE.
  - `software_patching_rating` number: The numeric rating for given security_domain.
  - `seed_hostnames` string[]: The seed hostnames are the hostnames used to start the scan. This doesn't include all hostnames from the scan results
  - `risk_configurations` object[]: A collection of RiskConfigurations.
    - `risk_relationship` string: The Custom Category for a TOE in the current customers portfolio.
    - `inherent_risk` string: A Risk Rating Scheme associated with TOE in current customers portfolio.
  - `rating_v2` string: The overall rating for the most recent analysis for the TOE.
  - `rating_numeric` number: The overall numeric rating for the most recent analysis for the TOE.
  - `rating` string: The legacy overall rating for the most recent analysis for the TOE.
  - `network_filtering_rating` number: The numeric rating for given security_domain.
  - `internal_name` string[], nullable: The user defined names for the TOE.
  - `internal_id` string[], nullable: The user defined identifiers for the TOE. These can be used to query the TOE.
  - `governance_rating` number: The numeric rating for given security_domain.
  - `email_security_rating` number: The numeric rating for given security_domain.
  - `duns_numbers` string[]: The DUNS number for the TOE. This may or may not be populated.
  - `dns_security_rating` number: The numeric rating for given security_domain.
  - `defensibility_rating` number: The numeric rating for given security_domain.
  - `data_loss_rating` number: The numeric rating for given security_domain.
  - `analysis_type` string: Is this TOE setup for a one_time or continuous scan?
  - `analysis_ts` string: The date the analysis was updated.
  - `analysis_id` string: The unique identifier for analysis.

## Other responses

- `401`: Authentication information was missing or invalid or the user is not authorized to access resource or perform the associated action.
- `404`: The URI didn't match an existing resource.

---

[API](https://skmtc.dev/recordedfuture/apis/mastercard-riskrecon-api.md) - [All operations](https://skmtc.dev/recordedfuture/apis/mastercard-riskrecon-api/llms.txt) - [OpenAPI document](https://skmtc.dev/recordedfuture/apis/mastercard-riskrecon-api/revisions/212ef0eeee9b?raw)